CVE-2026-48578

CVE-2026-48578 is a security feature bypass vulnerability found in Windows Secure Boot. It stems from a protection mechanism failure that allows an authorized attacker with local access to bypass a security feature. The vulnerability specifically involves a flaw in how the system validates certificate chains and manages trust relationships between security components. This enables an attacker to manipulate the boot process by substituting malicious certificates for legitimate ones, potentially leading to privilege escalation and the installation of persistent malware below the operating system level.