PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-45655 Microsoft CVE debrief

CVE-2026-45655 is a protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature with a physical attack. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. It was published on 2026-06-09T17:17:32.587Z and modified on 2026-06-11T18:48:49.223Z.

Vendor
Microsoft
Product
Windows 10 Version 1607
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-11
Advisory published
2026-06-09
Advisory updated
2026-06-11

Who should care

Users of Windows BitLocker should be aware of this vulnerability and take necessary precautions to prevent unauthorized access.

Technical summary

The vulnerability is caused by a protection mechanism failure in Windows BitLocker, which allows an unauthorized attacker to bypass a security feature with a physical attack. The CVSS vector is CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

Defensive priority

High

Recommended defensive actions

  • Apply the patch from Microsoft as soon as possible.
  • Use secure protocols for BitLocker.
  • Monitor for suspicious activity.

Evidence notes

The vulnerability is confirmed by Microsoft and has been analyzed by NVD.

Official resources

CVE-2026-45655 was published on 2026-06-09T17:17:32.587Z and modified on 2026-06-11T18:48:49.223Z.