Loading vulnerability…
Windows BitLocker Physical Security Feature Bypass
CVE-2025-26637 is a protection-mechanism failure in Windows BitLocker. An unauthorized attacker with physical access to a vulnerable device can bypass a BitLocker security feature, weakening the protection BitLocker is intended to provide for the device and its data.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can bypass a BitLocker security feature and undermine device and data-protection guarantees for a physically accessible Windows system.
If you can’t patch tonight, do this now.
Restrict unauthorized physical access to affected devices until updates are deployed.
Patch, then assume compromise.
Install the Microsoft April 2025 security updates for affected Windows systems, following the Microsoft security bulletin dated 2025-04-08.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
2 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.