A protection mechanism failure in Windows BitLocker allows an attacker with physical access to bypass a security feature on an encrypted volume without providing the correct unlock credentials. This vulnerability enables reading or modifying data on the BitLocker‑protected drive, compromising confidentiality and potentially integrity of stored information. The weakness involves an improper authorization or protection control in the BitLocker deployment process.

Microsoft Windows 10 versions 1607, 1809, 21H2 and 22H2; Windows 11 versions 23H2, 24H2, 25H2 and 26H1; and Microsoft Windows Server products from 2012 to 2025, including Server Core editions. Affected platforms span 32‑bit and 64‑bit architectures as well as ARM64 where applicable, covering a wide range of desktop, laptop, and server installations.

The CVSS score of 7.8 indicates a high severity, with exploitation requiring physical access to the target machine. EPSS for this vulnerability is very low but non‑zero (< 1%), indicating a slim but existent exploitation probability, and it is not listed in the CISA KEV catalog at this time, suggesting that widespread, automated exploitation has not been reported. Nonetheless, attackers who control the hardware can bypass BitLocker security, making the risk significant for assets that contain sensitive data.