AI description
CVE-2026-88070 is an out-of-bounds read vulnerability (associated with CWE-125) affecting Windows BitLocker, Microsoft's disk-encryption feature. Disclosed in October 2026, the flaw occurs when the system reads data beyond its intended buffer boundaries, which can expose sensitive memory. Exploiting this vulnerability requires an attacker to have local access to the target device with low-level authenticated privileges. The attack involves low complexity and requires no user interaction, allowing the attacker to bypass memory boundaries and elevate their privileges locally, which can lead to system-level access under certain conditions.
- Description
- Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- Source
- secure@microsoft.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- secure@microsoft.com
- CWE-125
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
8