CVE-2026-45658
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An attacker with local access could bypass BitLocker protections, potentially leading to unauthorized disk decryption and data leakage.
Recommendation
Install the latest Windows security updates available via Windows Update.
Other vulnerabilities in Windows BitLocker
See all- CVE-2026-88070High
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- CVE-2026-85920High
Time-of-check time-of-use (TOCTOU) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- CVE-2026-96909Critical
A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during data processing.
- CVE-2026-50507Medium
Missing authentication for a critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-69458High
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69449Medium
A heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
- CVE-2026-50661Medium
A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-45655Medium
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2021-38632Medium
A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.
Original NVD description (English source)
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS