CVE-2025-55333: medium-severity vulnerability in Microsoft Windows 10 Version 1507
Windows BitLocker Security Feature Bypass Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Windows BitLocker, a disk encryption feature, has a flaw that allows someone with physical access to a computer to bypass its security protections. This means an attacker could potentially access encrypted data without the proper password.
A logic error in BitLocker's comparison mechanism (CWE-1023: Incomplete Comparison) permits an attacker with physical device access to circumvent security validation checks. Exploitation requires direct physical interaction with the target system; successful bypass may lead to unauthorized access to encrypted disk contents.
In the same product, most dangerous first.