CVE-2026-50507

—

CVSS 3.1

6.8 medium

EPSS

5%p92

Published

Jun 9, 2026 (Jun 9, 2026)

Modified

Jul 23, 2026

Description

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 23h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Weakness: CWE-306
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.0%)

In the news6 stories

Microsoft Patches Record 206 Flaws, Including Three Zero

The Hacker NewsJun 12, 05:35 UTC · Jun 12, 2026Vulnerability CVE-2025-10263 CVE-2026-8863 CVE-2026-45657+9 CVEs

60

Microsoft ships largest Patch Tuesday on record, with one bug under active attack

The RecordJun 10, 13:03 UTC · Jun 10, 2026Vulnerability in the wildCVE-2026-45657 CVE-2026-41091 CVE-2026-505071

60

Microsoft Fixes 200 CVEs This Patch Tuesday

Infosecurity MagazineJun 10, 08:00 UTC · Jun 10, 2026Vulnerability CVE-2026-49160 CVE-2026-50507 CVE-2026-45586+4 CVEs

60

A Record-Breaking Patch Tuesday for June 2026

Krebs on SecurityJun 10, 01:28 UTC · Jun 10, 2026Vulnerability CVE-2026-49160 CVE-2026-45586 CVE-2026-50507

60

Microsoft Releases Record

Security AffairsJun 9, 22:56 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-41091 CVE-2026-45657 CVE-2026-47291+5 CVEs1

60

Microsoft breaks Patch Tuesday record with 206 vulnerabilities

CyberScoopJun 9, 19:53 UTC · Jun 9, 2026Vulnerability in the wildCVE-2026-45586 CVE-2026-50507 CVE-2026-49160+2 CVEs

60