CVE-2026-50661

—

CVSS 3.1

4.6 medium

EPSS

<1%p40

Published

Jul 14, 2026 (Jul 14, 2026)

Modified

Jul 22, 2026

Description

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2016, windows server 2019, windows server 2022, windows server 2025
Weakness: CWE-693
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news6 stories

AI-driven bug hunting fuels record Microsoft Patch Tuesday

Help Net SecurityJul 22, 10:08 UTC · Jul 22, 2026Vulnerability in the wildCVE-2026-56155 CVE-2026-56164 CVE-2026-50661+5 CVEs

60

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

Help Net SecurityJul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409 CVE-2026-15410 CVE-2026-56155+2 CVEs

60

Microsoft smashes Patch Tuesday record for second successive month

The RecordJul 15, 12:14 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56164 CVE-2026-56155 CVE-2026-55040+2 CVEs

60

Microsoft Patches 570 CVEs in Record Patch Tuesday

Infosecurity MagazineJul 15, 09:20 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56155 CVE-2026-56164 CVE-2026-50661

60

Microsoft Patches a Record 570 Security Flaws

Krebs on SecurityJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56155 CVE-2026-56164 CVE-2026-50661+1 CVEs

60

Microsoft Patches Record 622 Flaws, Including Two Zero

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56164 CVE-2026-56155 CVE-2026-50661+6 CVEs

60