Skip to content
OpenAdvisories
High MSRC-CVE-2026-45585 1 CVE

Windows BitLocker Security Feature Bypass Vulnerability

Published May 19, 2026 · Updated Jun 9, 2026 · Revision 7

Vendor: Microsoft

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

Details

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
A successful attacker could bypass the BitLocker Device Encryption feature on the system storage device. An attacker with physical access to the target could exploit this vulnerability to gain access to encrypted data.

Is there a script that I can copy and paste to implement a mitigation?
Yes. This script is an interim security fix that helps to reduce the risk of exploitation of the vulnerability.
The script is for WinRE and removes autofstx.exe from the BootExecute registry value. Since BootExecute runs programs very early in boot (even in recovery mode), removing this entry prevents that executable from running in a high‑privilege environment, reducing risk.
It works by mounting the WinRE image, editing its offline SYSTEM registry to remove the entry if present, then safely committing changes and re‑sealing WinRE so BitLocker trust remains intact.
It’s designed to be safe—if the autofstx.exe entry isn’t there, it exits without making changes.

Security updates
10.0.26100.32995 — https://support.microsoft.com/help/5094125
10.0.26200.8655 — https://support.microsoft.com/help/5094126
10.0.28000.2269 — https://support.microsoft.com/help/5095051

Vulnerabilities 1

Revision history

  1. #6

    Updated product information in the Software Update table. This is an informational change only.

  2. #7

    Added links to June 2026 Windows security updates. Microsoft recommends installing this updates as soon as possible.

  3. #3

    Updated the script in the FAQ section to make it language agnostic. Microsoft recommends customers to recopy the script and then run it to enable the mitigation.

  4. #4

    Added a script to implement a mitigation and removed the manual mitigations. Please read the information to decide if you need to run the provided script.

  5. #5

    Fixed a typographical error. This is an information change only.

  6. #2

    Updated **Step 2** of the first mitigation. This is an informational change only.

  7. #1

    Information published.

References