Vulnerability-Lookup

JVNDB-2026-029749

Vulnerability from jvndb - Published: 2026-08-24 08:04 - Updated:2026-08-24 08:04

Summary

Security information for Hitachi Disk Array Systems

Details

CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability CVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability CVE-2026-41092 | Microsoft Kinect Elevation of Privilege Vulnerability CVE-2026-41108 | Windows DNS Client Elevation of Privilege Vulnerability CVE-2026-42828 | Windows Projected File System Elevation of Privilege Vulnerability CVE-2026-42836 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability CVE-2026-42837 | Windows Projected File System Elevation of Privilege Vulnerability CVE-2026-42903 | Windows Kerberos Denial of Service Vulnerability CVE-2026-42904 | Windows TCP/IP Elevation of Privilege Vulnerability CVE-2026-42905 | Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2026-42906 | Windows Shell Information Disclosure Vulnerability CVE-2026-42907 | Windows Shell Information Disclosure Vulnerability CVE-2026-42908 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability CVE-2026-42909 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-42911 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-42912 | Windows Telephony Service Elevation of Privilege Vulnerability CVE-2026-42914 | Windows Kerberos Denial of Service Vulnerability CVE-2026-42915 | Windows TCP/IP Denial of Service Vulnerability CVE-2026-42916 | NT OS Kernel Elevation of Privilege Vulnerability CVE-2026-42968 | Windows Telephony Server Information Disclosure Vulnerability CVE-2026-42969 | Windows Push Notification Information Disclosure Vulnerability CVE-2026-42970 | Windows Push Notification Information Disclosure Vulnerability CVE-2026-42971 | Windows Push Notification Information Disclosure Vulnerability CVE-2026-42972 | Windows Hyper-V Information Disclosure Vulnerability CVE-2026-42973 | Windows Push Notification Information Disclosure Vulnerability CVE-2026-42977 | Windows Push Notifications Elevation of Privilege Vulnerability CVE-2026-42978 | Windows Push Notifications Elevation of Privilege Vulnerability CVE-2026-42979 | Windows Push Notifications Elevation of Privilege Vulnerability CVE-2026-42980 | NT OS Kernel Elevation of Privilege Vulnerability CVE-2026-42983 | Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2026-42984 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-42985 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-42986 | Microsoft Graphics Component Elevation of Privilege Vulnerability CVE-2026-42989 | Winlogon Elevation of Privilege Vulnerability CVE-2026-42991 | Windows Push Notifications Elevation of Privilege Vulnerability CVE-2026-42992 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-42993 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-44799 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-44801 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-44802 | Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2026-44803 | Windows Graphics Component Remote Code Execution Vulnerability CVE-2026-44812 | Windows Graphics Component Remote Code Execution Vulnerability CVE-2026-44815 | DHCP Client Service Remote Code Execution Vulnerability CVE-2026-45487 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability CVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability CVE-2026-45588 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-45592 | Windows Internet (wininet.dll) Elevation of Privilege Vulnerability CVE-2026-45593 | Windows SDK Elevation of Privilege Vulnerability CVE-2026-45594 | Windows Application Identity (AppID) Information Disclosure Vulnerability CVE-2026-45595 | Windows Mark of the Web Security Feature Bypass Vulnerability CVE-2026-45596 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-45598 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-45599 | Windows UPnP Device Host Remote Code Execution Vulnerability CVE-2026-45601 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-45602 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability CVE-2026-45603 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-45605 | Windows Bluetooth Service Elevation of Privilege Vulnerability CVE-2026-45606 | Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability CVE-2026-45607 | Windows Hyper-V Remote Code Execution Vulnerability CVE-2026-45608 | Windows DHCP Client Information Disclosure Vulnerability CVE-2026-45634 | Windows DHCP Client Information Disclosure Vulnerability CVE-2026-45635 | Windows UPnP Device Host Remote Code Execution Vulnerability CVE-2026-45636 | Windows NTFS Remote Code Execution Vulnerability CVE-2026-45637 | Microsoft DWM Core Library Elevation of Privilege Vulnerability CVE-2026-45638 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-45639 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability CVE-2026-45640 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability CVE-2026-45641 | Windows Hyper-V Remote Code Execution Vulnerability CVE-2026-45642 | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability CVE-2026-45653 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-45655 | Windows BitLocker Security Feature Bypass Vulnerability CVE-2026-45656 | UEFI Secure Boot Security Feature Bypass Vulnerability CVE-2026-45658 | Windows BitLocker Security Feature Bypass Vulnerability CVE-2026-47289 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-47291 | HTTP.sys Remote Code Execution Vulnerability CVE-2026-47648 | Windows Storage Elevation of Privilege Vulnerability CVE-2026-47653 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-47656 | Windows Boot Manager Security Feature Bypass Vulnerability CVE-2026-48563 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-48568 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-48570 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-48573 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-48574 | Windows Media Remote Code Execution Vulnerability CVE-2026-48575 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-48576 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-48578 | Secure Boot Security Feature Bypass Vulnerability CVE-2026-48583 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-49160 | HTTP.sys Denial of Service Vulnerability CVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability CVE-2026-8863 | UEFI Secure Boot Security Feature Bypass Vulnerability

References

Type

URL

	CVE	https://www.cve.org/CVERecord?id=CVE-2026-33828
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-34335
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-40404
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-40409
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-41092
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-41108
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42828
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42836
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42837
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42903
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42904
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42905
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42906
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42907
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42908
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42909
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42911
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42912
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42914
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42915
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42916
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42968
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42969
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42970
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42971
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42972
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42973
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42977
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42978
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42979
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42980
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42983
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42984
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42985
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42986
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42989
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42991
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42992
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-42993
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-44799
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-44801
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-44802
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-44803
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-44812
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-44815
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45487
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45586
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45588
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45592
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45593
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45594
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45595
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45596
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45598
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45599
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45601
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45602
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45603
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45605
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45606
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45607
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45608
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45634
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45635
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45636
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45637
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45638
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45639
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45640
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45641
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45642
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45653
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45655
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45656
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-45658
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-47289
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-47291
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-47648
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-47653
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-47656
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48563
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48568
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48570
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48573
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48574
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48575
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48576
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48578
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-48583
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-49160
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-50507
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-8863

Impacted products

Vendor

Product

Hitachi, Ltd

Hitachi Virtual Storage Platform

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-029749.html",
  "dc:date": "2026-08-24T17:04+09:00",
  "dcterms:issued": "2026-08-24T17:04+09:00",
  "dcterms:modified": "2026-08-24T17:04+09:00",
  "description": "CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability\r\nCVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability\r\nCVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability\r\nCVE-2026-41092 | Microsoft Kinect Elevation of Privilege Vulnerability\r\nCVE-2026-41108 | Windows DNS Client Elevation of Privilege Vulnerability\r\nCVE-2026-42828 | Windows Projected File System Elevation of Privilege Vulnerability\r\nCVE-2026-42836 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability\r\nCVE-2026-42837 | Windows Projected File System Elevation of Privilege Vulnerability\r\nCVE-2026-42903 | Windows Kerberos Denial of Service Vulnerability\r\nCVE-2026-42904 | Windows TCP/IP Elevation of Privilege Vulnerability\r\nCVE-2026-42905 | Windows DWM Core Library Elevation of Privilege Vulnerability\r\nCVE-2026-42906 | Windows Shell Information Disclosure Vulnerability\r\nCVE-2026-42907 | Windows Shell Information Disclosure Vulnerability\r\nCVE-2026-42908 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability\r\nCVE-2026-42909 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-42911 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-42912 | Windows Telephony Service Elevation of Privilege Vulnerability\r\nCVE-2026-42914 | Windows Kerberos Denial of Service Vulnerability\r\nCVE-2026-42915 | Windows TCP/IP Denial of Service Vulnerability\r\nCVE-2026-42916 | NT OS Kernel Elevation of Privilege Vulnerability\r\nCVE-2026-42968 | Windows Telephony Server Information Disclosure Vulnerability\r\nCVE-2026-42969 | Windows Push Notification Information Disclosure Vulnerability\r\nCVE-2026-42970 | Windows Push Notification Information Disclosure Vulnerability\r\nCVE-2026-42971 | Windows Push Notification Information Disclosure Vulnerability\r\nCVE-2026-42972 | Windows Hyper-V Information Disclosure Vulnerability\r\nCVE-2026-42973 | Windows Push Notification Information Disclosure Vulnerability\r\nCVE-2026-42977 | Windows Push Notifications Elevation of Privilege Vulnerability\r\nCVE-2026-42978 | Windows Push Notifications Elevation of Privilege Vulnerability\r\nCVE-2026-42979 | Windows Push Notifications Elevation of Privilege Vulnerability\r\nCVE-2026-42980 | NT OS Kernel Elevation of Privilege Vulnerability\r\nCVE-2026-42983 | Windows DWM Core Library Elevation of Privilege Vulnerability\r\nCVE-2026-42984 | Windows Kernel Elevation of Privilege Vulnerability\r\nCVE-2026-42985 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-42986 | Microsoft Graphics Component Elevation of Privilege Vulnerability\r\nCVE-2026-42989 | Winlogon Elevation of Privilege Vulnerability\r\nCVE-2026-42991 | Windows Push Notifications Elevation of Privilege Vulnerability\r\nCVE-2026-42992 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-42993 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-44799 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-44801 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-44802 | Windows DWM Core Library Elevation of Privilege Vulnerability\r\nCVE-2026-44803 | Windows Graphics Component Remote Code Execution Vulnerability\r\nCVE-2026-44812 | Windows Graphics Component Remote Code Execution Vulnerability\r\nCVE-2026-44815 | DHCP Client Service Remote Code Execution Vulnerability\r\nCVE-2026-45487 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability\r\nCVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability\r\nCVE-2026-45588 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-45592 | Windows Internet (wininet.dll) Elevation of Privilege Vulnerability\r\nCVE-2026-45593 | Windows SDK Elevation of Privilege Vulnerability\r\nCVE-2026-45594 | Windows Application Identity (AppID) Information Disclosure Vulnerability\r\nCVE-2026-45595 | Windows Mark of the Web Security Feature Bypass Vulnerability\r\nCVE-2026-45596 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-45598 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-45599 | Windows UPnP Device Host Remote Code Execution Vulnerability\r\nCVE-2026-45601 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-45602 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability\r\nCVE-2026-45603 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-45605 | Windows Bluetooth Service Elevation of Privilege Vulnerability\r\nCVE-2026-45606 | Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability\r\nCVE-2026-45607 | Windows Hyper-V Remote Code Execution Vulnerability\r\nCVE-2026-45608 | Windows DHCP Client Information Disclosure Vulnerability\r\nCVE-2026-45634 | Windows DHCP Client Information Disclosure Vulnerability\r\nCVE-2026-45635 | Windows UPnP Device Host Remote Code Execution Vulnerability\r\nCVE-2026-45636 | Windows NTFS Remote Code Execution Vulnerability\r\nCVE-2026-45637 | Microsoft DWM Core Library Elevation of Privilege Vulnerability\r\nCVE-2026-45638 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability\r\nCVE-2026-45639 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability\r\nCVE-2026-45640 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability\r\nCVE-2026-45641 | Windows Hyper-V Remote Code Execution Vulnerability\r\nCVE-2026-45642 | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability\r\nCVE-2026-45653 | Windows Kernel Elevation of Privilege Vulnerability\r\nCVE-2026-45655 | Windows BitLocker Security Feature Bypass Vulnerability\r\nCVE-2026-45656 | UEFI Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-45658 | Windows BitLocker Security Feature Bypass Vulnerability\r\nCVE-2026-47289 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-47291 | HTTP.sys Remote Code Execution Vulnerability\r\nCVE-2026-47648 | Windows Storage Elevation of Privilege Vulnerability\r\nCVE-2026-47653 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-47656 | Windows Boot Manager Security Feature Bypass Vulnerability\r\nCVE-2026-48563 | Remote Desktop Client Remote Code Execution Vulnerability\r\nCVE-2026-48568 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-48570 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-48573 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-48574 | Windows Media Remote Code Execution Vulnerability\r\nCVE-2026-48575 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-48576 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-48578 | Secure Boot Security Feature Bypass Vulnerability\r\nCVE-2026-48583 | Windows Kernel Elevation of Privilege Vulnerability\r\nCVE-2026-49160 | HTTP.sys Denial of Service Vulnerability\r\nCVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability\r\nCVE-2026-8863 | UEFI Secure Boot Security Feature Bypass Vulnerability",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-029749.html",
  "sec:cpe": {
    "#text": "cpe:/h:hitachi:virtual_storage_platform",
    "@product": "Hitachi Virtual Storage Platform",
    "@vendor": "Hitachi, Ltd",
    "@version": "2.2"
  },
  "sec:identifier": "JVNDB-2026-029749",
  "sec:references": [
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-33828",
      "@id": "CVE-2026-33828",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-34335",
      "@id": "CVE-2026-34335",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-40404",
      "@id": "CVE-2026-40404",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-40409",
      "@id": "CVE-2026-40409",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-41092",
      "@id": "CVE-2026-41092",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-41108",
      "@id": "CVE-2026-41108",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42828",
      "@id": "CVE-2026-42828",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42836",
      "@id": "CVE-2026-42836",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42837",
      "@id": "CVE-2026-42837",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42903",
      "@id": "CVE-2026-42903",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42904",
      "@id": "CVE-2026-42904",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42905",
      "@id": "CVE-2026-42905",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42906",
      "@id": "CVE-2026-42906",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42907",
      "@id": "CVE-2026-42907",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42908",
      "@id": "CVE-2026-42908",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42909",
      "@id": "CVE-2026-42909",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42911",
      "@id": "CVE-2026-42911",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42912",
      "@id": "CVE-2026-42912",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42914",
      "@id": "CVE-2026-42914",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42915",
      "@id": "CVE-2026-42915",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42916",
      "@id": "CVE-2026-42916",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42968",
      "@id": "CVE-2026-42968",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42969",
      "@id": "CVE-2026-42969",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42970",
      "@id": "CVE-2026-42970",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42971",
      "@id": "CVE-2026-42971",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42972",
      "@id": "CVE-2026-42972",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42973",
      "@id": "CVE-2026-42973",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42977",
      "@id": "CVE-2026-42977",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42978",
      "@id": "CVE-2026-42978",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42979",
      "@id": "CVE-2026-42979",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42980",
      "@id": "CVE-2026-42980",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42983",
      "@id": "CVE-2026-42983",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42984",
      "@id": "CVE-2026-42984",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42985",
      "@id": "CVE-2026-42985",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42986",
      "@id": "CVE-2026-42986",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42989",
      "@id": "CVE-2026-42989",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42991",
      "@id": "CVE-2026-42991",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42992",
      "@id": "CVE-2026-42992",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-42993",
      "@id": "CVE-2026-42993",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-44799",
      "@id": "CVE-2026-44799",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-44801",
      "@id": "CVE-2026-44801",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-44802",
      "@id": "CVE-2026-44802",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-44803",
      "@id": "CVE-2026-44803",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-44812",
      "@id": "CVE-2026-44812",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-44815",
      "@id": "CVE-2026-44815",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45487",
      "@id": "CVE-2026-45487",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45586",
      "@id": "CVE-2026-45586",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45588",
      "@id": "CVE-2026-45588",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45592",
      "@id": "CVE-2026-45592",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45593",
      "@id": "CVE-2026-45593",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45594",
      "@id": "CVE-2026-45594",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45595",
      "@id": "CVE-2026-45595",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45596",
      "@id": "CVE-2026-45596",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45598",
      "@id": "CVE-2026-45598",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45599",
      "@id": "CVE-2026-45599",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45601",
      "@id": "CVE-2026-45601",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45602",
      "@id": "CVE-2026-45602",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45603",
      "@id": "CVE-2026-45603",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45605",
      "@id": "CVE-2026-45605",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45606",
      "@id": "CVE-2026-45606",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45607",
      "@id": "CVE-2026-45607",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45608",
      "@id": "CVE-2026-45608",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45634",
      "@id": "CVE-2026-45634",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45635",
      "@id": "CVE-2026-45635",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45636",
      "@id": "CVE-2026-45636",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45637",
      "@id": "CVE-2026-45637",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45638",
      "@id": "CVE-2026-45638",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45639",
      "@id": "CVE-2026-45639",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45640",
      "@id": "CVE-2026-45640",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45641",
      "@id": "CVE-2026-45641",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45642",
      "@id": "CVE-2026-45642",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45653",
      "@id": "CVE-2026-45653",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45655",
      "@id": "CVE-2026-45655",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45656",
      "@id": "CVE-2026-45656",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-45658",
      "@id": "CVE-2026-45658",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-47289",
      "@id": "CVE-2026-47289",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-47291",
      "@id": "CVE-2026-47291",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-47648",
      "@id": "CVE-2026-47648",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-47653",
      "@id": "CVE-2026-47653",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-47656",
      "@id": "CVE-2026-47656",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48563",
      "@id": "CVE-2026-48563",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48568",
      "@id": "CVE-2026-48568",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48570",
      "@id": "CVE-2026-48570",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48573",
      "@id": "CVE-2026-48573",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48574",
      "@id": "CVE-2026-48574",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48575",
      "@id": "CVE-2026-48575",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48576",
      "@id": "CVE-2026-48576",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48578",
      "@id": "CVE-2026-48578",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-48583",
      "@id": "CVE-2026-48583",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-49160",
      "@id": "CVE-2026-49160",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-50507",
      "@id": "CVE-2026-50507",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-8863",
      "@id": "CVE-2026-8863",
      "@source": "CVE"
    }
  ],
  "title": "Security information for Hitachi Disk Array Systems"
}

CVE-2026-50507 (GCVE-0-2026-50507)

Vulnerability from cvelistv5 – Published: 2026-06-09 17:05 – Updated: 2026-08-25 22:44

Title

Windows BitLocker Security Feature Bypass Vulnerability

Summary

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 14:13 UTC

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

microsoft mitre root

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

18 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.9234 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.8880 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.7417 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.7417 (custom)
Microsoft	Windows 11 version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.7219 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.7219 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.8655 (custom)
Microsoft	Windows 11 Version 25H2	Affected: 10.0.26200.0 , < 10.0.26200.8655 (custom)
Microsoft	Windows 11 version 26H1	Affected: 10.0.28000.0 , < 10.0.28000.2269 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.23228 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.23228 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.9234 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.9234 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.8880 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.8880 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.5256 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.8655 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.8655 (custom)

Date Public

2026-06-09 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50507",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T14:13:36.016183Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-10T14:14:06.787Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.9234",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.8880",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.7417",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.7417",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.7219",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.7219",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.8655",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 25H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26200.8655",
              "status": "affected",
              "version": "10.0.26200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 26H1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.28000.2269",
              "status": "affected",
              "version": "10.0.28000.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.23228",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.23228",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.9234",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.9234",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.8880",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.8880",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.5256",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.8655",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.8655",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.8880",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.8880",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.8880",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.5256",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.7417",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.7417",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.8655",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26200.8655",
                  "versionStartIncluding": "10.0.26200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.7219",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.7219",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.8655",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.8655",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.28000.2269",
                  "versionStartIncluding": "10.0.28000.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.9234",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.9234",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.9234",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.23228",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.23228",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-06-09T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T22:44:18.176Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows BitLocker Security Feature Bypass Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50507"
        }
      ],
      "title": "Windows BitLocker Security Feature Bypass Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-50507",
    "datePublished": "2026-06-09T17:05:55.486Z",
    "dateReserved": "2026-06-04T19:00:41.292Z",
    "dateUpdated": "2026-08-25T22:44:18.176Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8863 (GCVE-0-2026-8863)

Vulnerability from cvelistv5 – Published: 2026-06-09 18:10 – Updated: 2026-06-10 15:16

Title

CVE-2026-8863

Summary

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-09 19:03 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature
CWE-354 - Improper Validation of Integrity Check Value

Assigner

certcc mitre root

References

3 references

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory
https://kb.cert.org/vuls/id/616257	third-party-advisory
https://www.kb.cert.org/vuls/id/616257

Impacted products

14 products

Vendor	Product	Version
Oracle Corporation	OracleLinux(7.2) shim	Affected: 0.9
PC-Doctor	Service Center Enterprise	Affected: 14 , ≤ 17.0.7536.900 (custom)
PC-Doctor	Service Center Drive Erase	Affected: 15 , ≤ 17.0.7538.592 (custom)
PC-Doctor	Service Center Japan	Affected: 15 , ≤ 17.0.7539.904 (custom)
PC-Doctor	Service Center	Affected: 14 , ≤ 17.0.7535.900 (custom)
PC-Doctor	Network Factory for Linux (Bootable Diagnostics)	Affected: 6.9 , ≤ 6.20.7711.267 (custom)
PC-Doctor	Factory for Linux (Bootable Diagnostics)	Affected: 6.9 , ≤ 6.20.7710.267 (custom)
Spyrus	WTGCreator	Affected: 4.2
Blancco UK	WhiteCanyon WipeDrive	Affected: 8.0.0 , ≤ 8.1.3 (custom)
baramundi software	baramundi Management Suite	Affected: * , ≤ 2024R1 (custom)
SUSE Linux	OpenSUSE shim	Affected: 0.9
Finland Matriculation Board	Abitti 1	Affected: 1.0.0
NTC IT ROSA LLC	RosaLinux	Affected: R9
NTC IT ROSA LLC	RosaLinux	Affected: R10

Credits

Thanks to Martin Smolar of ESET for discovering and reporting this vulnerability

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8863",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-09T19:03:03.811729Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-09T19:03:21.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-06-09T19:41:27.054Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/616257"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "OracleLinux(7.2) shim",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "0.9"
            }
          ]
        },
        {
          "product": "Service Center Enterprise",
          "vendor": "PC-Doctor",
          "versions": [
            {
              "lessThanOrEqual": "17.0.7536.900",
              "status": "affected",
              "version": "14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Service Center Drive Erase",
          "vendor": "PC-Doctor",
          "versions": [
            {
              "lessThanOrEqual": "17.0.7538.592",
              "status": "affected",
              "version": "15",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Service Center Japan",
          "vendor": "PC-Doctor",
          "versions": [
            {
              "lessThanOrEqual": "17.0.7539.904",
              "status": "affected",
              "version": "15",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Service Center",
          "vendor": "PC-Doctor",
          "versions": [
            {
              "lessThanOrEqual": "17.0.7535.900",
              "status": "affected",
              "version": "14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Network Factory for Linux (Bootable Diagnostics)",
          "vendor": "PC-Doctor",
          "versions": [
            {
              "lessThanOrEqual": "6.20.7711.267",
              "status": "affected",
              "version": "6.9",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Factory for Linux (Bootable Diagnostics)",
          "vendor": "PC-Doctor",
          "versions": [
            {
              "lessThanOrEqual": "6.20.7710.267",
              "status": "affected",
              "version": "6.9",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "WTGCreator",
          "vendor": "Spyrus",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            }
          ]
        },
        {
          "product": "WhiteCanyon WipeDrive",
          "vendor": "Blancco UK",
          "versions": [
            {
              "lessThanOrEqual": "8.1.3",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "baramundi Management Suite",
          "vendor": "baramundi software",
          "versions": [
            {
              "lessThanOrEqual": "2024R1",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "OpenSUSE shim",
          "vendor": "SUSE Linux",
          "versions": [
            {
              "status": "affected",
              "version": "0.9"
            }
          ]
        },
        {
          "product": "Abitti 1",
          "vendor": "Finland Matriculation Board",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0"
            }
          ]
        },
        {
          "product": "RosaLinux",
          "vendor": "NTC IT ROSA LLC",
          "versions": [
            {
              "status": "affected",
              "version": "R9"
            }
          ]
        },
        {
          "product": "RosaLinux",
          "vendor": "NTC IT ROSA LLC",
          "versions": [
            {
              "status": "affected",
              "version": "R10"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks to Martin Smolar of ESET for discovering and reporting this vulnerability"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-354: Improper Validation of Integrity Check Value",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T15:16:35.228Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "Microsoft Vendor Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8863"
        },
        {
          "name": "CERT/CC Vulnerability Notice",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://kb.cert.org/vuls/id/616257"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CVE-2026-8863",
      "x_generator": {
        "engine": "VINCE 3.0.42",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-8863"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-8863",
    "datePublished": "2026-06-09T18:10:15.426Z",
    "dateReserved": "2026-05-18T19:41:10.790Z",
    "dateUpdated": "2026-06-10T15:16:35.228Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

JVNDB-2026-029749

CVE-2026-50507 (GCVE-0-2026-50507)

CVE-2026-8863 (GCVE-0-2026-8863)

Tags

Sightings

Nomenclature