Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
A successful attacker could bypass the BitLocker Device Encryption feature on the system storage device. An attacker with physical access to the target could exploit this vulnerability to gain access to encrypted data.
Security updates
10.0.17763.8880 — https://support.microsoft.com/help/5094123
10.0.20348.5256 — https://support.microsoft.com/help/5094128
10.0.19044.7417 — https://support.microsoft.com/help/5094127
10.0.26100.32995 — https://support.microsoft.com/help/5094125
10.0.26200.8655 — https://support.microsoft.com/help/5094126
10.0.22631.7219 — https://support.microsoft.com/help/5093998
10.0.28000.2269 — https://support.microsoft.com/help/5095051
10.0.14393.9234 — https://support.microsoft.com/help/5094122
6.2.9200.26132 — https://support.microsoft.com/help/5094042
6.3.9600.23228 — https://support.microsoft.com/help/5094041
Vulnerabilities 1
-
High 7.8
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-45658 Windows BitLocker Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45658
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss