{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-000096f82989","releaseDate":"2026-11-10T08:00:00-08:00","cveNumber":"CVE-2026-109462","cveTitle":"Azure Firmware Security Feature Bypass Vulnerability","releaseNumber":"2026-Nov","vulnType":"Security Vulnerability","latestRevisionDate":"2026-11-10T08:00:00-08:00","description":"<p>Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.</p>\n","cweList":["CWE-299: Improper Check for Certificate Revocation"],"cweDetailsListForSearch":["cwe: CWE-299: Improper Check for Certificate Revocation","cweUrl: https://cwe.mitre.org/data/definitions/299.html"],"unformattedDescription":"<p>Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.</p>","mitreText":"CVE-2026-109462","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109462","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Azure Firmware","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000007,"impact":"Security Feature Bypass","langCode":"en-US","baseScore":"4.4","temporalScore":"3.9","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-299: Improper Check for Certificate Revocation","https://cwe.mitre.org/data/definitions/299.html"]}],"articles":[{"articleType":"FAQ","description":"<p><strong>What action do customers need to take to address this vulnerability?</strong></p>\n<p>After Microsoft deploys the platform update, customers must restart their affected Azure Trusted Launch or confidential virtual machines to apply the updated Secure Boot protection. Plan the restart for an appropriate maintenance window to minimize disruption to workloads. For information about these VM security features, see <a href=\"https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch\">Trusted Launch</a> and <a href=\"https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-vm-overview\">Azure confidential VMs</a>.</p>\n","ordinal":10000},{"title":"Azure Firmware Security Feature Bypass Vulnerability","articleType":"100000000","description":"<p>Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.</p>\n","ordinal":10000},{"articleType":"FAQ","description":"<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could bypass Secure Boot.</p>\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-109462","version":1,"revisionDate":"2026-11-10T08:00:00-08:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"ccf8c65a-94c7-f111-aaad-000d3a37724b"}]}