Skip to content
OpenAdvisories
High MSRC-CVE-2021-38632 1 CVE

Windows BitLocker Security Feature Bypass Vulnerability

Published Sep 14, 2021 · Updated Sep 23, 2021 · Revision 2

Vendor: Microsoft

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
A successful attacker could bypass the BitLocker Device Encryption feature on the system storage device. An attacker with physical access to a powered off system could exploit this vulnerability to gain access to encrypted data.

Security updates
10.0.17763.2183 — https://support.microsoft.com/help/5005568
10.0.18363.1801 — https://support.microsoft.com/help/5005566
10.0.19043.1237 — https://support.microsoft.com/help/5005565
10.0.20348.230 — https://support.microsoft.com/help/5005575
10.0.14393.4651 — https://support.microsoft.com/help/5005573

Vulnerabilities 1

Revision history

  1. #2

    For all CVEs affecting Windows that were released on September 14, 2021: 1) In the Security Updates table, the Build Numbers for KB KB5005565 have been corrected for all affected editions of the following versions of Windows 10: Windows 10, version 2004, all editions; Windows Server, version 2004 (Server Core installation); Windows 10, version 20H2; Windows Server, version 20H2 (Server Core Installation); Windows 10, version 21H1. 2) For CVEs where Windows Server 2022 is affected the links have been updated to point to information related to [5005575](https://support.microsoft.com/en-us/help/5005575). Customers whose Windows devices are configured to receive automatic updates do not need to take any further action.

  2. #1

    Information published.

References