[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdHQisVq3DaKwgCcvOaF6BaBfAMVgwhJPy-7HY-sAPwY":3},{"article":4,"iocs":36,"watch_terms":43,"solutions":44,"lesson":117},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"c94a33b5-8fff-4ee5-98ee-8e0a3a25b602","Windows BitLocker Vulnerabilities Allow Attackers to Bypass Security Feature","windows-bitlocker-vulnerabilities-allow-attackers-to-bypass-security-feature-dcf611","Microsoft has disclosed two Windows BitLocker security feature bypass vulnerabilities that could allow attackers with physical access to weaken device protections. Published on November 10, 2026, the flaws are tracked as CVE-2026-97015 and CVE-2026-119832. Microsoft rates both as Important, with CVSS base scores of 6.8 and 5.9, respectively. The bugs have different causes and access […] The post Windows BitLocker Vulnerabilities Allow Attackers to Bypass Security Feature appeared first on Cyber Security News.","Microsoft has disclosed two Windows BitLocker vulnerabilities, CVE-2026-97015 and CVE-2026-119832, rated as Important with CVSS scores of 6.8 and 5.9 respectively. CVE-2026-119832 allows bypass of BitLocker Device Encryption with physical access and basic user privileges, while CVE-2026-97015 is a heap-based buffer overflow requiring no privileges or user interaction. Microsoft has released several KB updates to address these flaws across various Windows versions.","Microsoft discloses two Windows BitLocker bypass vulnerabilities, CVE-2026-97015 and CVE-2026-119832.","https:\u002F\u002Fcybersecuritynews.com\u002Fwindows-bitlocker-security-bypass\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FWindows-BitLocker-Vulnerability-Allow-attacker-to-bypass-Security-Feature.webp","2026-11-11T11:31:29+00:00","2026-11-11T12:00:40.302819+00:00",8,[17,20],{"name":18,"type":19},"Windows BitLocker","product",{"name":21,"type":22},"Microsoft","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},[37,41],{"type":38,"value":39,"context":40},"cve","CVE-2026-97015","Windows BitLocker vulnerability",{"type":38,"value":42,"context":40},"CVE-2026-119832",[21,18],{"controls":45,"vendors":113},[46,74,87],{"slug":47,"name":48,"problem":49,"products":50},"patch-management","Automated patch management","Known holes get closed in days, not months.",[51,58,66],{"vendor_slug":52,"vendor_name":53,"vendor_logo":54,"product_slug":47,"product_name":55,"url":56,"description":57},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":75,"name":76,"problem":77,"products":78},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[79,80],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},{"vendor_slug":81,"vendor_name":21,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":88,"name":89,"problem":90,"products":91},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[92,100,105],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":101,"product_name":102,"url":103,"description":104},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[114],{"slug":81,"name":21,"logo_path":82,"roles":115},[116],"affected",{"slug":118,"title":119,"body":120,"framework_refs":121,"framework_notes":127},"bitlocker-bypasses-highlight-the-risk-of-unpatched-encryption-controls","BitLocker Bypasses Highlight the Risk of Unpatched Encryption Controls","Two newly disclosed BitLocker vulnerabilities expose a critical gap: encryption at rest provides little protection when the underlying platform software can be bypassed. CVE-2026-119832 is particularly alarming because it requires only physical access and basic user privileges to defeat BitLocker Device Encryption — a scenario common in lost or stolen laptops. CVE-2026-97015 compounds the risk with a heap-based buffer overflow that requires no privileges or user interaction, widening the attack surface. These flaws matter because organisations often treat BitLocker as a final safety net for endpoint data protection, yet that net fails completely if patches are not applied promptly. Microsoft has released KB updates, making timely patch deployment the single most effective control available right now.",[122,123,124,125,126],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SC-28: Protection of Information at Rest","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":128,"NIST SP 800-53 SI-2: Flaw Remediation":129,"CIS Control 7: Continuous Vulnerability Management (v8)":130,"NIST SP 800-53 SC-28: Protection of Information at Rest":131,"CIS Control 2: Inventory and Control of Software Assets (v8)":132},"This point requires security in acquisition, development, and maintenance including vulnerability handling, meaning operators must have processes to respond to disclosed flaws like these BitLocker CVEs within their maintenance lifecycle.","SI-2 requires organisations to identify, report, and correct information system flaws within defined time frames, which is the core action needed to close these BitLocker vulnerabilities.","This control requires organisations to establish a process for identifying, prioritising, and remediating vulnerabilities — directly addressing the need to patch CVE-2026-97015 and CVE-2026-119832 before attackers can exploit them.","SC-28 mandates that encryption protecting data at rest remains effective; a vulnerability that bypasses BitLocker directly undermines this control's intent.","Knowing exactly which Windows versions are deployed across endpoints is a prerequisite for verifying that every affected system has received the BitLocker KB updates."]