Microsoft Windows BitLocker Security Feature Bypass Vulnerability

A vulnerability in Windows BitLocker has been identified, allowing an unauthorized attacker to bypass the Device Encryption feature on the system storage device. This issue arises from improper enforcement of behavioral workflow, which can be exploited through a physical attack. As a result, an attacker with physical access to the device could gain access to encrypted data.

Impact

Exploitation of this vulnerability allows for unauthorized bypassing of BitLocker's Device Encryption feature, potentially leading to unauthorized access to encrypted data on the system storage device.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066791, KB5066793, KB5066782, KB5066835, and KB5066586.