Main Vulnerability Database Vulnerabilities #VU85238

Security features bypass in Microsoft Windows and Windows Server - CVE-2024-20666

Published: January 9, 2024

Vulnerability identifier: #VU85238

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20666

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to security features bypass in BitLocker. An authenticated attacker with physical access can bypass the BitLocker Device Encryption feature and gain access to encrypted data.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2024-20666

Install updates from vendor's website.

External References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20666

Related Security Bulletins