PatchTheCVEBitLocker vulnerabilities and fixes
CVEs that mention BitLocker, ranked by priority. 9 tracked.
BitLocker has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-10-13. Highest priority: CVE-2026-96909 (score 63/100).
- CVE-2026-96909 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network
- CVE-2026-69458 HIGH 8.0 UPGRADE UPGRADE Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83634 HIGH 7.8 Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- CVE-2026-88070 HIGH 7.8 UPGRADE UPGRADE Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- CVE-2026-69449 MEDIUM 6.7 UPGRADE UPGRADE Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
- CVE-2026-83500 MEDIUM 6.1 Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to by
- CVE-2026-85920 HIGH 7.0 UPGRADE UPGRADE Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevat
- CVE-2026-107634 MEDIUM 6.1 Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum()
- CVE-2026-107635 MEDIUM 6.1 Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows at
FAQ
How do I fix BitLocker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is BitLocker being exploited right now?
None of the tracked BitLocker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which BitLocker CVE should I patch first?
CVE-2026-96909 currently ranks highest (63/100): Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
Newest BitLocker CVEs
- CVE-2026-96909 CRITICAL 9.8 2026-10-13: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute
- CVE-2026-88070 HIGH 7.8 2026-10-13: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privilege
- CVE-2026-85920 HIGH 7.0 2026-10-13: Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorize
- CVE-2026-83634 HIGH 7.8 2026-10-13: Double free in Windows BitLocker allows an authorized attacker to elevate privileges local
- CVE-2026-83500 MEDIUM 6.1 2026-10-13: Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unautho
Live from the NVD (last 120 days)
Loading…