CVE-2026-50661

EUVD-2026-44122
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 39.36%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10_1607
𝑥
< 10.0.14393.9339
microsoftwindows_10_1607
𝑥
< 10.0.14393.9339
microsoftwindows_10_1809
𝑥
< 10.0.17763.9020
microsoftwindows_10_1809
𝑥
< 10.0.17763.9020
microsoftwindows_10_21h2
𝑥
< 10.0.19044.7548
microsoftwindows_10_21h2
𝑥
< 10.0.19044.7548
microsoftwindows_10_21h2
𝑥
< 10.0.19044.7548
microsoftwindows_10_22h2
𝑥
< 10.0.19045.7548
microsoftwindows_10_22h2
𝑥
< 10.0.19045.7548
microsoftwindows_10_22h2
𝑥
< 10.0.19045.7548
microsoftwindows_11_24h2
𝑥
< 10.0.26100.8875
microsoftwindows_11_24h2
𝑥
< 10.0.26100.8875
microsoftwindows_11_25h2
𝑥
< 10.0.26200.8875
microsoftwindows_11_25h2
𝑥
< 10.0.26200.8875
microsoftwindows_11_26h1
𝑥
< 10.0.28000.2525
microsoftwindows_11_26h1
𝑥
< 10.0.28000.2525
microsoftwindows_server_2016
𝑥
< 10.0.14393.9339
microsoftwindows_server_2019
𝑥
< 10.0.17763.9020
microsoftwindows_server_2022
𝑥
< 10.0.20348.5386
microsoftwindows_server_2025
𝑥
< 10.0.26100.33158
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
1809 (x64, x86)
21H2 (arm64, x64, x86)
22H2 (arm64, x64, x86)
Windows 11
24H2 (arm64, x64)
25H2 (arm64, x64)
26H1 (arm64, x64)
Windows Server 2016
Server Core
Standard
Windows Server 2019
Server Core
Standard
Windows Server 2022
Standard
Windows Server 2025
Server Core
Standard