Microsoft Windows BitLocker Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Windows BitLocker. This issue arises from the improper handling of hibernation images, which can be exposed in an unencrypted, cleartext format. The vulnerability is present in multiple Windows versions, including Windows 10 (various releases) and Windows 11 (version 22H2). Additionally, several Windows Server versions are affected. Exploitation of this vulnerability requires physical access to the machine's hard disk.

Impact

Successful exploitation allows the unauthorized disclosure of unencrypted hibernation images in cleartext.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5049981, KB5050021, KB5050048, KB5050004, KB5050049, KB5050063, and KB5049993.