{"id":"CVE-2026-96909","published":"2026-10-13T19:22:01.520","lastModified":"2026-10-16T15:02:07.660","description":"Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96909","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows BitLocker allows remote attackers to execute arbitrary code on affected systems by sending specially crafted network requests. This vulnerability is particularly dangerous because it can be exploited without authentication and affects BitLocker's network communication functionality.","exploitability":"Exploitation is relatively straightforward with no authentication required, though it may need the attacker to be able to send network traffic to the target system's BitLocker service port.","blast_radius":"The impact could be severe across Windows environments that use BitLocker encryption, potentially allowing attackers to gain full system access on any vulnerable machine with network connectivity to BitLocker services.","remediation":"Apply the latest Windows updates including KB5049238 or later, which contain the patched version of BitLocker functionality.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","bitlocker","network","windows"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:51:39.511Z"}}