A protection mechanism failure in Windows BitLocker allows an attacker with physical access to bypass a security feature and access the encrypted volume without providing the correct unlock credentials. The vulnerability enables the attacker to either read or modify data on a BitLocker‑protected drive, compromising confidentiality and potentially integrity of the stored information. The weakness identified is an improper authorization control in the BitLocker deployment process.

Microsoft Windows 10 versions 1607, 1809, 21H2 and 22H2; Windows 11 versions 23H2, 24H2, 25H2 and 26H1; and Microsoft Windows Server products from 2012 to 2025, including Server Core editions. The affected platforms span 32‑bit and 64‑bit architectures as well as ARM64 where applicable, covering a wide range of desktop, laptop, and server installations.

The CVSS score of 7.8 indicates a high severity, with exploitation requiring physical access to the target machine. EPSS for this vulnerability is not available, and it is not listed in the CISA KEV catalog at this time, suggesting that widespread, automated exploitation has not been reported. Nevertheless, attackers who control the hardware can bypass BitLocker security, making the risk significant for assets that contain sensitive data.