(Updated) Take action: Mitigation guidance updated with a new script for CVE-2026-45585

Take action: Mitigation guidance updated with a new script for CVE 2026 45585

2026-05-21T23:31:01.260Z

<div>Microsoft has updated the mitigation guidance in <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585" rel="noopener noreferrer" target="_blank">CVE-2026-45585</a>, a Windows BitLocker security feature bypass vulnerability. The updated guidance replaces previously documented manual mitigation steps with a <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585#faq" rel="noopener noreferrer" target="_blank">script</a> that helps reduce exposure while a future security update is developed to address this vulnerability. Note that a limited set of Windows versions are affected: Windows 11, versions 26H1, 25H2, and 24H2, and Windows Server 2025.</div><div><br></div><div><b>When will this happen:</b></div><div>The updated mitigation guidance and <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585#faq" rel="noopener noreferrer" target="_blank">script</a> are available now.</div><div><br></div><div><b>How this will affect your organization:</b></div><div>Windows devices that use BitLocker may be exposed to this vulnerability if mitigations are not applied. Organizational environments that previously implemented the documented manual mitigation steps do not need to take additional action, as the script only simplifies deployment of the existing mitigation.</div><div><br></div><div>Organizations that have not yet taken action should assess their exposure to this vulnerability and determine whether mitigation is appropriate. Microsoft recommends that organizations consider implementing this mitigation if devices and data may be at risk of being compromised or stolen. For example, this may apply if your organization’s employees take their work devices home or on business travel.</div><div><b>&nbsp;</b></div><div><b>What you need to do to prepare:</b></div><div>Organizational environments using BitLocker on affected Windows versions should review the updated guidance in the Microsoft Security Update Guide to determine whether applying the mitigation is necessary.</div><div><br></div><div><b>Additional information:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</b></div><ul><li><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585" rel="noopener noreferrer" target="_blank">CVE-2026-45585: Windows BitLocker Security Feature Bypass Vulnerability</a></li></ul>