CVE-2026-27913HighCVSS 7.7
Windows BitLocker Security Feature Bypass Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.
🎯 Affected products11
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server 2022, 23H2 Edition (Server Core installation)
✅ Remediation
KB5082123 (Security Update) — fixed build 10.0.17763.8644 KB5082060 (Security Update) — fixed build 10.0.25398.2274 KB5082198 (Security Update) — fixed build 10.0.14393.9060 KB5082142 (Security Update) — fixed build 10.0.20348.5020 KB5082127 (Monthly Rollup) — fixed build 6.2.9200.26026 KB5082126 (Monthly Rollup) — fixed build 6.3.9600.23132
🔗 References (13)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27913
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5082123
- referencehttps://support.microsoft.com/help/5082123
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5082060
- referencehttps://support.microsoft.com/help/5082060
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5082198
- referencehttps://support.microsoft.com/help/5082198
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5082142
- referencehttps://support.microsoft.com/help/5082142
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5082127
- referencehttps://support.microsoft.com/help/5082127
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5082126
- referencehttps://support.microsoft.com/help/5082126