Windows BitLocker flaws let attackers bypass device encryption
Microsoft has disclosed two Windows BitLocker security feature bypass vulnerabilities that could let attackers with physical access weaken device protections. The issues are tracked as CVE-2026-97015 and CVE-2026-119832, and Microsoft rates both as Important. Physical access and privilege requirements CVE-2026-119832 can let a successful attacker bypass BitLocker Device Encryption on the system storage device and reach encrypted data. The attack requires physical access and basic user privileges, but it does…