Microsoft Windows BitLocker Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Windows BitLocker. This issue could potentially allow an attacker to access sensitive information, specifically the BitLocker key. The vulnerability is present in several versions of Windows Server and Windows 10, as well as in Windows 11 and Windows Server 2022. The vulnerability arises from the need for an attacker to repeatedly exploit the issue by swapping virtual hard disks, indicating a high complexity in exploitation.

Impact

Successful exploitation of this vulnerability could lead to unauthorized access to BitLocker keys, allowing an attacker to decrypt data protected by BitLocker.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles referenced in the vulnerability details.