Microsoft Windows BitLocker Security Feature Bypass Vulnerability

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in Windows BitLocker. This vulnerability allows an unauthorized attacker to bypass the BitLocker Device Encryption feature on the system storage device through a physical attack, potentially gaining access to encrypted data. The issue affects multiple Windows Server and Windows 10 versions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to encrypted data by bypassing BitLocker's device encryption on the system storage device.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5062572, KB5062557, KB5062597, KB5062560, and others listed in the Microsoft Security Update Guide.