CVE-2026-50661

Published Jul 14, 2026

Last updated 14 hours ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-50661 is identified as a security feature bypass vulnerability impacting Windows BitLocker. This flaw involves a protection mechanism failure within BitLocker's device encryption, which could allow an attacker with physical access to a system to circumvent the encryption. Successful exploitation of this vulnerability would enable an unauthorized individual with physical access to bypass BitLocker Device Encryption and access data stored on the system drive. The vulnerability was publicly disclosed prior to the release of a patch, though no active exploitation has been confirmed.

Description
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Source
secure@microsoft.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.1
Impact score
5.2
Exploitability score
0.9
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity
MEDIUM

Weaknesses

secure@microsoft.com
CWE-693

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

7

  1. 🚨 New Windows BitLocker Zero-Day Patched Read the full analysis: https://t.co/BLB9J8cioQ Microsoft has fixed CVE-2026-50661, a publicly disclosed BitLocker Security Feature Bypass vulnerability that could allow attackers with physical access to bypass Windows disk encryption

    @thecybersecguru

    15 Jul 2026

    76 Impressions

    0 Retweets

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  2. Windowsのディスク暗号化機能BitLockerに、物理アクセス可能な攻撃者が暗号化を回避し、システムドライブ上のデータへアクセスできるゼロデイ脆弱性が見つかった。CVE-2026-50661として追跡され、2026年7月の更新

    @yousukezan

    15 Jul 2026

    1118 Impressions

    2 Retweets

    4 Likes

    4 Bookmarks

    0 Replies

    1 Quote

  3. 【脆弱性の嵐】マイクロソフトさん、月例更新で史上最多となる622件の脆弱性を修正。ゼロデイはADFSのCVE-2026-56155とSharePointのCVE-2026-56164の2件。他外部指摘は物理でのBitLocker回避CVE-2026-50661。 https://t.co/zJK92NBTQE

    @__kokumoto

    14 Jul 2026

    1679 Impressions

    4 Retweets

    13 Likes

    2 Bookmarks

    1 Reply

    1 Quote

  4. 🚨 𝗛𝗼𝗿𝗶𝘇𝗼𝗻 𝗔𝗹𝗲𝗿𝘁 – 𝗝𝘂𝗹𝘆 𝟮𝟬𝟮𝟲 𝗣𝗮𝘁𝗰𝗵 𝗧𝘂𝗲𝘀𝗱𝗮𝘆 This month brings 𝟯 𝗻𝗲𝘄 𝘇𝗲𝗿𝗼-𝗱𝗮𝘆𝘀 and an unusually high number of critical vulnerabilities - 𝟭

    @horizon_secured

    14 Jul 2026

    343 Impressions

    1 Retweet

    5 Likes

    2 Bookmarks

    0 Replies

    0 Quotes

  5. 🚨 Microsoft Patch Tuesday (July 2026): Microsoft has patched ~570 vulnerabilities, including critical RCE flaws and three publicly disclosed issues: CVE-2026-56164, CVE-2026-56155, and CVE-2026-50661. #CyberSecurity #Microsoft #PatchTuesday #CVE #ThreatWire

    @ThreatWire_

    14 Jul 2026

    70 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.