CVE-2026-50507
MediumCVSS 6.8Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
Missing authentication for a critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Risk Assessment
The organization is at risk of physical bypass of BitLocker disk encryption, potentially leading to unauthorized access to data on devices.
Recommendation
Apply the available patch from Microsoft and consider additional physical security measures such as port locks or hardware encryption.
Other vulnerabilities in Windows BitLocker
See all- CVE-2026-69458High
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69449Medium
A heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
- CVE-2026-50661Medium
A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-45658High
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
- CVE-2026-45655Medium
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2021-38632Medium
A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.
Original NVD description (English source)
Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS