{"id":"CVE-2026-119832","kind":"vulnerability","aliases":["CVE-2026-119832"],"related":[],"title":"Windows BitLocker: access control flaw lets local attacker bypass a security feature","description":"Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.","summary":"Improper access control in Windows BitLocker lets an authorized attacker bypass a security feature. The attack requires physical access to the machine.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bitlocker","infrastructure","windows"],"not_affected_if":["no-physical-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:58+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","triaged_at":"2026-11-10T20:00:02+00:00","updated_at":"2026-11-10T20:00:02+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:00:02Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows BitLocker: access control flaw lets local attacker bypass a security feature","impact":"medium","summary":"Improper access control in Windows BitLocker lets an authorized attacker bypass a security feature. The attack requires physical access to the machine.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["windows","bitlocker"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker bypasses BitLocker protection on a physically accessed device","analyst_note":"Check the NVD entry and the Microsoft Security Update Guide for affected Windows versions and the fixed build.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-physical-access"],"who_is_affected":"Windows machines using BitLocker disk encryption are the affected systems, and the attacker must already be authorized on the device and have physical access. unknown whether specific Windows builds or BitLocker configurations are exposed.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000654,"input_tokens":4488,"output_tokens":411,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119832':15A,18A '-2026':14A,17A 'access':3A,23B,40B,45C 'allow':50C 'attack':8A,31B,37B,53C,62C 'author':30B,52C 'bitlock':2A,19B,27B,49C 'bypass':9A,32B,55C 'control':4A,24B,46C 'cve':13A,16A 'featur':12A,35B,58C 'flaw':5A 'improp':22B,44C 'infrastructur':20B 'let':6A,28B 'local':7A 'machin':43B 'physic':39B,61C 'requir':38B 'secur':11A,34B,57C 'window':1A,21B,26B,48C","nicknames":[],"mitigations":[],"who_affected":"Windows machines using BitLocker disk encryption are the affected systems, and the attacker must already be authorized on the device and have physical access. unknown whether specific Windows builds or BitLocker configurations are exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["bitlocker","infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-119832':15A,18A '-2026':14A,17A 'access':3A 'attack':8A 'bitlock':2A 'bypass':9A 'control':4A 'cve':13A,16A 'featur':12A 'flaw':5A 'let':6A 'local':7A 'secur':11A 'window':1A","search_b":"'access':23B,40B 'attack':31B,37B 'author':30B 'bitlock':19B,27B 'bypass':32B 'control':24B 'featur':35B 'improp':22B 'infrastructur':20B 'let':28B 'machin':43B 'physic':39B 'requir':38B 'secur':34B 'window':21B,26B","search_c":"'access':45C 'allow':50C 'attack':53C,62C 'author':52C 'bitlock':49C 'bypass':55C 'control':46C 'featur':58C 'improp':44C 'physic':61C 'secur':57C 'window':48C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119832","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119832","severity":null,"published_at":"2026-11-10T19:19:58+00:00","modified_at":"2026-11-10T19:19:58+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","fetched_at":"2026-11-10T19:24:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}