‘GreatXML’ Zero-Day Exploit Bypasses BitLocker
Teaser from the source
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode. The post ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on BitLocker
Other advisories
- MediumCVE-2026-119832Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.
- MediumCVE-2026-97015Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- MediumCVE-2026-97015Windows BitLocker Security Feature Bypass Vulnerability
- MediumCVE-2026-119832Windows BitLocker Security Feature Bypass Vulnerability
- CriticalCVE-2026-96909Heap-basierter Pufferüberlauf in Windows BitLocker ermöglicht es einem nicht autorisierten Angreifer, Code über ein Netzwerk auszuführen.
- CriticalCVE-2026-96909Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
- HighCVE-2026-83634Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- HighCVE-2026-88070Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Other news entries
- Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-DaysNewsSecurityWeek
- Fresh ATM Crypto Software Bugs: Jackpot or Bust?NewsDark Reading
- GreatXML zero-day BitLocker bypass doesn’t seem to work, yetNewsCSO Online
- Microsoft's worst 'Nightmare' unleashes BitLocker bypass 0-dayNewsThe Register — Security
- New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML FilesNewsThe Hacker News
- Microsoft fixes BitLocker recovery bug on Windows Server 2025NewsBleepingComputer
- Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-daysNewsBleepingComputer
- NCSC-2026-0165 [1.00] [M/H] Kwetsbaarheid aangetroffen in Microsoft WindowsNewsNCSC-NL
Source: https://www.securityweek.com/greatxml-zero-day-exploit-bypasses-bitlocker/
ID