CVE-2026-45655
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Risk Assessment
An attacker with physical access to the device can bypass BitLocker encryption and access sensitive data, leading to a serious confidentiality breach.
Recommendation
Apply the patch from Microsoft or update Windows. Strengthen physical security of devices, e.g., by locking ports and monitoring access.
Other vulnerabilities in Windows BitLocker
See all- CVE-2026-50507Medium
Missing authentication for a critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-50661Medium
A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-45658High
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
- CVE-2021-38632Medium
A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.
Original NVD description (English source)
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.