PT-2026-58487 · Microsoft · Windows 10+4

CVE-2026-50661 · Published 2026-07-14 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Windows 10 (affected versions not specified) Windows 11 (affected versions not specified) Windows Server 2016 (affected versions not specified) Windows Server 2019 (affected versions not specified) Windows Server 2022 (affected versions not specified) Windows Server 2025 (affected versions not specified)

Description A protection mechanism failure in the BitLocker device encryption workflow allows an unauthorized attacker with physical access to a system to bypass security features. This flaw can be used to circumvent disk encryption and access sensitive data stored on the system drive.

Recommendations Deploy the July 2026 security updates for Windows 10, Windows 11, and Windows Server instances. Verify that BitLocker remains enabled and correctly configured after patching. Strengthen physical device security and review encryption and pre-boot authentication policies.

Fix

DoS

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2026-09730

CVE-2026-50661

Affected Products

Bitlocker

Windows

Windows 10

Windows 11

Windows Server

References · 33

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50661 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-50661 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09730 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-50661 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50661 · Security Note
• https://reddit.com/r/pwnhub/comments/1uxowtc/microsoft_july_2026_patch_tuesday_fixes_622_cves · Reddit Post
• https://twitter.com/AlexNguyen65/status/2078087929272881203 · Twitter Post
• https://twitter.com/techepages/status/2077316236988277210 · Twitter Post
• https://t.me/true_secator/8409 · Telegram Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2026-58487 · Note
• https://twitter.com/The_Cyber_News/status/2077090185356214592 · Twitter Post
• https://t.me/EchelonEyes/4759 · Telegram Post
• https://reddit.com/r/KibernetinisSaugumas/comments/1ux18tr/patvirtinta_patch_now_cve_rekordinis_microsoft · Reddit Post
• https://twitter.com/Action1corp/status/2077117058215711098 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1uxowzk/microsoft_july_2026_patch_tuesday_fixes_622_flaws · Reddit Post