Lucene search
+L

920 matches found

osv_cve
osv_cve
•added 2026/10/08 2:10 p.m.•13 views

CVE-2026-107635 Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow

Dislocker through 0.7.3 contains an integer underflow vulnerability in getvmk and getfvek that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datumsize smaller than the 36-byte AES-CCM header, causing...

6.9CVSS6AI score
SaveExploits0References7
CVE
CVE
•added 2026/10/08 2:10 p.m.•18 views

CVE-2026-107634

Dislocker versions through 0.7.3 are vulnerable to a heap out-of-bounds read in the get_dataset() and get_next_datum() functions. The root cause is a failure to validate dataset and datum sizes against the metadata allocation. An attacker can craft a BitLocker volume image with inflated sizes to ...

6.9CVSS5.9AI score0.00129EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/08 2:10 p.m.•43 views

CVE-2026-107634 Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size

Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in getdataset and getnextdatum that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted,...

6.9CVSS0.00129EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•10 views

CVE-2026-107635: Integer Underflow (Wrap or Wraparound)

Dislocker through 0.7.3 contains an integer underflow vulnerability in getvmk and getfvek that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datumsize smaller than the 36-byte AES-CCM header, causing...

6.9CVSS5.9AI score0.00129EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•15 views

PT-2026-107994

Name of the Vulnerable Software and Affected Versions Dislocker versions prior to 0.7.4 Description An integer underflow exists in the get vmk and get fvek functions. This issue allows attackers to trigger out-of-bounds heap reads by providing a malicious BitLocker volume image where the datum si...

6.9CVSS5.8AI score0.00129EPSS
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/23 6:14 a.m.•21 views

GreatXML

GreatXML GreatXML bitlocker bypass vulnerability Steps to reproduce, 1. If defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable. You will have to copy "unattend.xml" and "Recovery" directory to the root of t...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/16 10:39 a.m.•23 views

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker Recovery Tool respalda las claves de recuperación de BitLocker y audita CVE-2026-45585 en Windows 10/11. Las búsquedas de bitlocker yellowkey , yellowkey bitlocker , yellowkey github y yellowkey vulnerability aterrizan aquí. CLI + GUI portátil para volúmene...

6.8CVSS7.3AI score0.00491EPSS
SaveExploits5
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•29 views

Astra Linux – Vulnerability in Samba

The fixes in 4.6.16, 4.7.9, 4.8.4, and 4.9.7 for CVE-2018-10919, which address the issue of confidential attributes being disclosed via LDAP filters, were insufficient. An attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC...

6.5CVSS6.3AI score0.00571EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 6:19 p.m.•16 views

CVE-2026-69458

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

8CVSS0.00768EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:19 p.m.•41 views

CVE-2026-69449

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...

6.7CVSS0.00348EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 5:15 p.m.•34 views

EUVD-2026-73501

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...

6.7CVSS6.2AI score0.00348EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 5:15 p.m.•100 views

CVE-2026-69449

CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...

6.7CVSS6.2AI score0.00348EPSS
SaveExploits0References1Affected Software13
EUVD
EUVD
•added 2026/09/08 5:11 p.m.•22 views

EUVD-2026-72973

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

8CVSS5.8AI score0.00768EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 5:11 p.m.•63 views

CVE-2026-69458

Windows BitLocker is affected by an out-of-bounds read vulnerability that allows an authorized attacker to elevate privileges over a network . Per the CNA, the attack requires low privileges (i.e., the attacker must already be authenticated) and user interaction . The CVSS 3.1 score is 8.0 (HIGH)...

8CVSS5.8AI score0.00768EPSS
SaveExploits0References1Affected Software13
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•18 views

Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

8CVSS5.8AI score0.00768EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•37 views

Windows BitLocker Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...

6.7CVSS6.5AI score0.00348EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-87484

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An out-of-bounds read occurs in Windows BitLocker, which allows an authorized attacker to elevate privileges over a network. This issue enables attackers to gain higher levels of...

8CVSS5.8AI score0.00768EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-69449: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...

6.7CVSS6.2AI score0.00348EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•40 views

PT-2026-87477

A newly disclosed Windows BitLocker vulnerability CVE-2026-69449 could let attackers execute arbitrary code via local or network paths. Affected versions span Windows 10, Windows 11, and all recent Windows Server releases. Microsoft rates the risk “Important” yet “Exploitation Less Likely,” and h...

6.7CVSS6.3AI score0.00348EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-69458: Out-of-bounds Read

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

8CVSS5.8AI score0.00768EPSS
SaveExploits0References3
Rows per page
Query Builder