Skip to content
ThreatCluster

Windows BitLocker Vulnerabilities Enable Security Bypass for Physical Attacks

First seen 12 Nov 2026, 05:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 05:20 UTC

Microsoft disclosed two vulnerabilities in Windows BitLocker that allow attackers with physical access to bypass security features. The flaws, tracked as CVE-2026-97015 and CVE-2026-119832, were published on November 10, 2026, and are rated Important with CVSS scores of 6.8 and 5.9, respectively. One vulnerability can expose encrypted data to attackers with basic user privileges, while the other requires no existing privileges. Microsoft has released security updates for affected systems. Organizations using Windows devices with BitLocker enabled should apply these updates promptly to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 8h ago How this analysis works

Timeline

2026-11-10
CVE-2026-97015 and CVE-2026-119832 published
Microsoft disclosed two BitLocker vulnerabilities allowing security bypass for physical attackers.
Cybersecuritynews
2026-11-10
Patches released for vulnerabilities
Microsoft issued security updates for Windows systems affected by the BitLocker vulnerabilities.
Feeds.4Sysops

More articles in this cluster (2)

Following this threat?

Track Microsoft and CVE-2026-119832 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

What are the CVSS scores for the vulnerabilities?
CVE-2026-97015 has a CVSS score of 6.8, while CVE-2026-119832 has a score of 5.9.
How can I protect my systems?
Apply the security updates released by Microsoft for the affected BitLocker vulnerabilities.
Do I need to take immediate action?
Yes, it is recommended to apply the patches promptly to mitigate the risk of exploitation.