Microsoft has disclosed two Windows BitLocker security feature bypass vulnerabilities that could let attackers with physical access weaken device protections. The issues are tracked as CVE-2026-97015 and CVE-2026-119832, and Microsoft rates both as Important.
Physical access and privilege requirements
CVE-2026-119832 can let a successful attacker bypass BitLocker Device Encryption on the system storage device and reach encrypted data. The attack requires physical access and basic user privileges, but it does not require another user to click a link, open a file, or approve a prompt. Microsoft says the flaw involves improper access control rather than a memory handling error, and exploitation requires no user interaction.
CVE-2026-97015 comes from a heap-based buffer overflow classified as CWE-122. That kind of flaw happens when software writes past the memory space reserved for a buffer. Microsoft rates the vulnerability as Important with a CVSS base score of 6.8.
Disclosure and risk assessment
Microsoft published the flaws on November 10, 2026, with CVSS base scores of 6.8 for CVE-2026-97015 and 5.9 for CVE-2026-119832. The company says the bugs have different causes and access requirements, so security teams should assess each one separately. For CVE-2026-119832, Microsoft says the vulnerability was not publicly disclosed or known to be exploited when it was released, and it rates exploitation as less likely. Microsoft credits researcher yhw.
Affected Windows versions and updates
CVE-2026-119832 affects Windows 10 versions 1809, 21H2, and 22H2, several Windows 11 releases, and Windows Server 2019, 2022, and 2025. Supported processor platforms vary by release. CVE-2026-97015 has a broader affected product list that also includes older Windows Server branches, and administrators are told to check both records rather than rely on a single shared device list.
Microsoft lists KB5131096 for affected Windows 10 21H2 and 22H2 systems, KB5131087 for Windows 11 23H2, and KB5132059 for Windows 11 26H1 under CVE-2026-119832. Server updates include KB5131085 for Server 2019 and KB5131090 for Server 2022. These disclosures follow earlier Windows BitLocker bypass vulnerabilities and the October 2026 BitLocker security updates.
Licensed under CC BY-ND 4.0 International