CVE-2026-69449
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
Risk Assessment
An attacker could gain control of the system or run malicious software, potentially leading to full compromise.
Recommendation
Install the latest Windows security updates and monitor the system for unusual activity.
Other vulnerabilities in Windows BitLocker
See all- CVE-2026-50507Medium
Missing authentication for a critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-69458High
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50661Medium
A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-45658High
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
- CVE-2026-45655Medium
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2021-38632Medium
A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.
Original NVD description (English source)
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS