PT-2026-32775 · Microsoft · Bitlocker+1

Alon Leviev + 1 · Published 2026-04-14 · Updated 2026-04-17 · CVE-2026-27913

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Windows BitLocker (affected versions not specified)

Description Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature, specifically Secure Boot, locally. This issue poses a risk to data integrity and confidentiality, particularly within enterprise device security architectures.

Recommendations Apply the April 2026 security updates.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-05370

CVE-2026-27913

Affected Products

Bitlocker

Windows

References · 12

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27913 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27913 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27913 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-27913 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05370 · Security Note
• https://reddit.com/r/cybersecurity/comments/1snxqpu/cve202627913 · Reddit Post
• https://twitter.com/cybrsecpath/status/2044394010090098816 · Twitter Post
• https://twitter.com/CyberEdition/status/2044358822530052380 · Twitter Post
• https://twitter.com/The_Cyber_News/status/2044392876583563478 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2044348297175769220 · Twitter Post
• https://twitter.com/Ebryx/status/2044413471270293996 · Twitter Post
• https://twitter.com/CVEnew/status/2044358606410125481 · Twitter Post