CVE-2026-88070

A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during data processing.

Missing authentication for a critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Time-of-check time-of-use (TOCTOU) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

URL redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.

A heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.