Windows BitLocker Vulnerabilities Allow Attackers to Bypass Security Feature

Cybersecuritynews •Abinaya • November 11, 2026

Microsoft has disclosed two Windows BitLocker security feature bypass vulnerabilities that could allow attackers with physical access to weaken device protections. Published on November 10, 2026, the flaws are tracked as CVE-2026-97015 and CVE-2026-119832. Microsoft rates both as Important, with CVSS base scores of 6.8 and 5.9, respectively. The bugs have different causes and access […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Windows BitLocker Vulnerabilities Enable Security Bypass for Physical Attacks Microsoft disclosed two vulnerabilities in Windows BitLocker that allow attackers with physical access to bypass security features. The flaws, tracked as CVE-2026-97015 and CVE-2026-119832, were published on November 10, 2026, and are rated Important with CVSS scores of 6.8 and 5.9, respectively. One vulnerability can expose encrypted data to attackers with basic user privileges, while the other requires no existing privileges. Microsoft has released security updates for affected systems. Organizations using Windows devices with BitLocker enabled should apply these updates promptly to mitigate risks. 2 sources 46

Extracted Entities

CVEs (2)

CVE-2026-119832 CVE-2026-97015

Platforms (1)

Windows