Unverified50% confidenceCautionExact time
LU marks content read from the screen as untrusted, but the wording used to judge whether a button is sensitive comes from a list, and expressions the list does not recognize cannot be identified; the eight corrections and ten security fixes added after Windows verification have only been run in automated tests.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027
Sources
Related Entities
Related Claims
UnverifiedThe test suite only asserted that well-formed key blocks are masked, but no test asserted that malformed blocks do not leak, so the vulnerability remained even while all tests passed.66% similarUnverifiedIn a 30-attack test, the gate let through 9 of 10 legitimate customer confirmation updates, and the one it missed was a disclosed race condition.65% similarUnverifiedWindows 10引入SmartScreen筛选器，开始对未知来源程序弹出警告60% similarUnverifiedUnder a secure boot mechanism, even if an attacker modifies the firmware code, as long as the private key is not leaked, the modified firmware cannot pass signature verification.58% similarUnverifiedAn empty caller list does not mean safety; it should be treated as unknown and the codebase should be searched.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1064511API
curl https://kongchang.com/api/v1/knowledge/claims/1064511MCP
get_claim(id=1064511)