PatchTheCVE: BitLockerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-96909: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a networkhttps://patchthecve.com/cve/CVE-2026-96909.htmlhttps://patchthecve.com/cve/CVE-2026-96909.htmlFri, 16 Oct 2026 15:02:07 +0000CRITICAL 9.8: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.CVE-2026-88070: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.https://patchthecve.com/cve/CVE-2026-88070.htmlhttps://patchthecve.com/cve/CVE-2026-88070.htmlFri, 16 Oct 2026 16:22:26 +0000HIGH 7.8: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.CVE-2026-85920: Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevathttps://patchthecve.com/cve/CVE-2026-85920.htmlhttps://patchthecve.com/cve/CVE-2026-85920.htmlFri, 16 Oct 2026 17:55:21 +0000HIGH 7.0: Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.CVE-2026-83634: Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.https://patchthecve.com/cve/CVE-2026-83634.htmlhttps://patchthecve.com/cve/CVE-2026-83634.htmlTue, 13 Oct 2026 21:18:28 +0000HIGH 7.8: Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.CVE-2026-83500: Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to byhttps://patchthecve.com/cve/CVE-2026-83500.htmlhttps://patchthecve.com/cve/CVE-2026-83500.htmlFri, 16 Oct 2026 16:21:04 +0000MEDIUM 6.1: Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.CVE-2026-107635: Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows athttps://patchthecve.com/cve/CVE-2026-107635.htmlhttps://patchthecve.com/cve/CVE-2026-107635.htmlFri, 16 Oct 2026 12:16:31 +0000MEDIUM 6.1: Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AES-CCM header, causinCVE-2026-107634: Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum()https://patchthecve.com/cve/CVE-2026-107634.htmlhttps://patchthecve.com/cve/CVE-2026-107634.htmlSat, 10 Oct 2026 04:18:09 +0000MEDIUM 6.1: Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted, CVE-2026-69458: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-69458.htmlhttps://patchthecve.com/cve/CVE-2026-69458.htmlFri, 25 Sep 2026 12:29:36 +0000HIGH 8.0: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.CVE-2026-69449: Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.https://patchthecve.com/cve/CVE-2026-69449.htmlhttps://patchthecve.com/cve/CVE-2026-69449.htmlFri, 25 Sep 2026 13:48:39 +0000MEDIUM 6.7: Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.