Vulnerability-Lookup

CVE-2022-41099 (GCVE-0-2022-41099)

Vulnerability from cvelistv5 – Published: 2022-11-09 00:00 – Updated: 2025-01-02 21:31

Title

BitLocker Security Feature Bypass Vulnerability

Summary

BitLocker Security Feature Bypass Vulnerability

Severity

4.6 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE

Security Feature Bypass

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

10 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.3650 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.0 , < 10.0.17763.3650 (custom)
Microsoft	Windows 10 Version 21H1	Affected: 10.0.0 , < 10.0.19043.2251 (custom)
Microsoft	Windows 10 Version 20H2	Affected: 10.0.0 , < 10.0.19042.2251 (custom)
Microsoft	Windows 11 version 21H2	Affected: 10.0.0 , < 10.0.22000.1219 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19043.0 , < 10.0.19044.2251 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.819 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.2251 (custom)
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.19567 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.5501 (custom)

Date Public

2022-11-08 08:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:35:49.367Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "BitLocker Security Feature Bypass Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.3650",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 21H1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19043.2251",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 10 Version 20H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19042.2251",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22000.1219",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.2251",
              "status": "affected",
              "version": "10.0.19043.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.819",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "ARM64-based Systems",
            "32-bit Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.2251",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.19567",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.5501",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.3650",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.17763.3650",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H1:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19043.2251",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19042.2251",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22000.1219",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.2251",
                  "versionStartIncluding": "10.0.19043.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.819",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.2251",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.19567",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.5501",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-11-08T08:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "BitLocker Security Feature Bypass Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Security Feature Bypass",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-02T21:31:45.520Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "BitLocker Security Feature Bypass Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
        }
      ],
      "title": "BitLocker Security Feature Bypass Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-41099",
    "datePublished": "2022-11-09T00:00:00.000Z",
    "dateReserved": "2022-09-19T00:00:00.000Z",
    "dateUpdated": "2025-01-02T21:31:45.520Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-41099",
      "date": "2026-05-31",
      "epss": "0.02515",
      "percentile": "0.85651"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21540673-614A-4D40-8BD7-3F07723803B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9E2C378B-1507-4C81-82F6-9F599616845A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FAE4278F-71A7-43E9-8F79-1CBFAE71D730\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71E65CB9-6DC2-4A90-8C6A-103BEDC99823\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D5DE444-AEA8-4674-AC58-31FC1F12BB55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*\", \"matchCriteriaId\": \"B9F64296-66BF-4F1D-A11C-0C44C347E2AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"5D7F7DDB-440E-42CD-82F4-B2C13F3CC462\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*\", \"matchCriteriaId\": \"747ED159-1972-4310-AAD1-8E02AFB08826\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*\", \"matchCriteriaId\": \"62B9100B-206D-4FD1-8D23-A355DCA37460\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"BitLocker Security Feature Bypass Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de omisi\\u00f3n de la caracter\\u00edstica de seguridad de BitLocker\"}]",
      "id": "CVE-2022-41099",
      "lastModified": "2024-11-21T07:22:36.830",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.6, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 0.9, \"impactScore\": 3.6}]}",
      "published": "2022-11-09T22:15:22.980",
      "references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099\", \"source\": \"secure@microsoft.com\"}, {\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "secure@microsoft.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-41099\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2022-11-09T22:15:22.980\",\"lastModified\":\"2024-11-21T07:22:36.830\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"BitLocker Security Feature Bypass Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de omisi\u00f3n de la caracter\u00edstica de seguridad de BitLocker\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E2C378B-1507-4C81-82F6-9F599616845A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FAE4278F-71A7-43E9-8F79-1CBFAE71D730\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71E65CB9-6DC2-4A90-8C6A-103BEDC99823\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D5DE444-AEA8-4674-AC58-31FC1F12BB55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"B9F64296-66BF-4F1D-A11C-0C44C347E2AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5D7F7DDB-440E-42CD-82F4-B2C13F3CC462\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"747ED159-1972-4310-AAD1-8E02AFB08826\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"62B9100B-206D-4FD1-8D23-A355DCA37460\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099\",\"source\":\"secure@microsoft.com\"},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}

CERTFR-2022-AVI-1012

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Microsoft Windows. Elles permettent à un attaquant de provoquer une exécution de code à distance, une élévation de privilèges, un contournement de la fonctionnalité de sécurité, une atteinte à la confidentialité des données et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes ARM64
Microsoft	Windows	Windows 8.1 pour systèmes 32 bits
Microsoft	Windows	Windows Subsystem pour Linux (WSL2)
Microsoft	Windows	Windows Sysmon
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2
Microsoft	Windows	Windows Server 2012
Microsoft	Windows	Windows Server 2012 (Server Core installation)
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 1607 pour systèmes 32 bits
Microsoft	Windows	Windows Server 2022 (Server Core installation)
Microsoft	Windows	Windows Server 2016 (Server Core installation)
Microsoft	Windows	Windows 7 pour systèmes 32 bits Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes ARM64
Microsoft	Windows	Windows 11 pour systèmes ARM64
Microsoft	Windows	Windows 10 pour systèmes x64
Microsoft	Windows	Windows RT 8.1
Microsoft	Windows	Windows Server 2019 (Server Core installation)
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2 (Server Core installation)
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation)
Microsoft	Windows	Windows Server 2016
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes 32 bits
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 11 pour systèmes x64
Microsoft	Windows	Windows 7 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows Server 2019
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 8.1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes ARM64
Microsoft	Windows	Windows 10 Version 1607 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2
Microsoft	Windows	Windows Server 2022
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2
Microsoft	Windows	Windows 10 Version 1809 pour systèmes 32 bits
Microsoft	Windows	Windows 10 pour systèmes 32 bits

References

Title

Publication Time

CERTFR-2022-AVI-1012

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes ARM64
Microsoft	Windows	Windows 8.1 pour systèmes 32 bits
Microsoft	Windows	Windows Subsystem pour Linux (WSL2)
Microsoft	Windows	Windows Sysmon
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2
Microsoft	Windows	Windows Server 2012
Microsoft	Windows	Windows Server 2012 (Server Core installation)
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 1607 pour systèmes 32 bits
Microsoft	Windows	Windows Server 2022 (Server Core installation)
Microsoft	Windows	Windows Server 2016 (Server Core installation)
Microsoft	Windows	Windows 7 pour systèmes 32 bits Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes ARM64
Microsoft	Windows	Windows 11 pour systèmes ARM64
Microsoft	Windows	Windows 10 pour systèmes x64
Microsoft	Windows	Windows RT 8.1
Microsoft	Windows	Windows Server 2019 (Server Core installation)
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2012 R2 (Server Core installation)
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation)
Microsoft	Windows	Windows Server 2016
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes 32 bits
Microsoft	Windows	Windows 10 Version 20H2 pour systèmes 32 bits
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 11 pour systèmes x64
Microsoft	Windows	Windows 7 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows Server 2019
Microsoft	Windows	Windows 10 Version 21H1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation)
Microsoft	Windows	Windows 8.1 pour systèmes x64
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes ARM64
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1
Microsoft	Windows	Windows 10 Version 1809 pour systèmes ARM64
Microsoft	Windows	Windows 10 Version 1607 pour systèmes x64
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2
Microsoft	Windows	Windows Server 2022
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2
Microsoft	Windows	Windows 10 Version 1809 pour systèmes 32 bits
Microsoft	Windows	Windows 10 pour systèmes 32 bits

References

Title

Publication Time

BDU:2022-06834

Vulnerability from fstec - Published: 08.11.2022

Title

Уязвимость функции защиты данных BitLocker Device Encryption операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности

Description

Уязвимость функции защиты данных BitLocker Device Encryption операционных систем Windows связана с ошибками в настройках безопасности. Эксплуатация уязвимости может позволить нарушителю обойти ограничения безопасности

Severity


                    
                      AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vendor

Microsoft Corp

Software Name

Windows 10, Windows 10 1607, Windows 10 1809, Windows 10 20H2, Windows 10 21H1, Windows 11, Windows 10 21H2, Windows 11 22H2, Windows 10 22H2

Software Version

- (Windows 10), - (Windows 10 1607), - (Windows 10 1809), - (Windows 10 20H2), - (Windows 10 21H1), - (Windows 11), - (Windows 10 21H2), - (Windows 11 22H2), - (Windows 10 22H2)

Possible Mitigations

Использование рекомендаций: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099

Reference

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099 https://nvd.nist.gov/vuln/detail/CVE-2022-41099

CWE

CWE-254

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
  "CVSS 3.0": "AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO10, TO11, TO12, TO18, TO19, TO20, TO46",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO10 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 20H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019959), TO11 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019966), TO12 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 11 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019961), TO18 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 21H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019959), TO19 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 21H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x86, 2022 11 (KB5019959), TO20 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 10 22H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019959), TO46 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows 11 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 x64, 2022 11 (KB5019961)",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows 10), - (Windows 10 1607), - (Windows 10 1809), - (Windows 10 20H2), - (Windows 10 21H1), - (Windows 11), - (Windows 10 21H2), - (Windows 11 22H2), - (Windows 10 22H2)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "08.11.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "17.11.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "17.11.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-06834",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-41099",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows 10, Windows 10 1607, Windows 10 1809, Windows 10 20H2, Windows 10 21H1, Windows 11, Windows 10 21H2, Windows 11 22H2, Windows 10 22H2",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1809 - 32-bit, Microsoft Corp Windows 10 1809 - ARM64, Microsoft Corp Windows 10 20H2 - ARM64, Microsoft Corp Windows 10 20H2 - 32-bit, Microsoft Corp Windows 10 20H2 - 64-bit, Microsoft Corp Windows 10 21H1 - 32-bit, Microsoft Corp Windows 10 21H1 - 64-bit, Microsoft Corp Windows 10 21H1 - ARM64, Microsoft Corp Windows 11 - 64-bit, Microsoft Corp Windows 11 - ARM64, Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, Microsoft Corp Windows 10 21H2 - ARM64, Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 11 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 32-bit",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 BitLocker Device Encryption \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u042d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CWE-254)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 BitLocker Device Encryption \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-41099",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-254",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,9)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)"
}

FKIE_CVE-2022-41099

Vulnerability from fkie_nvd - Published: 2022-11-09 22:15 - Updated: 2024-11-21 07:22

Severity

4.6 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

BitLocker Security Feature Bypass Vulnerability

References

	URL	Tags
	secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099
	af854a3a-2127-422b-91ae-364da2661108	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099

Impacted products

Vendor	Product	Version
microsoft	windows_10	-
microsoft	windows_10	20h2
microsoft	windows_10	21h1
microsoft	windows_10	21h2
microsoft	windows_10	22h2
microsoft	windows_10	1607
microsoft	windows_10	1809
microsoft	windows_11	-
microsoft	windows_11	-
microsoft	windows_11	22h2
microsoft	windows_11	22h2

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E2C378B-1507-4C81-82F6-9F599616845A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAE4278F-71A7-43E9-8F79-1CBFAE71D730",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
              "matchCriteriaId": "71E65CB9-6DC2-4A90-8C6A-103BEDC99823",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D5DE444-AEA8-4674-AC58-31FC1F12BB55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
              "matchCriteriaId": "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "B9F64296-66BF-4F1D-A11C-0C44C347E2AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
              "matchCriteriaId": "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
              "matchCriteriaId": "747ED159-1972-4310-AAD1-8E02AFB08826",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
              "matchCriteriaId": "62B9100B-206D-4FD1-8D23-A355DCA37460",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "BitLocker Security Feature Bypass Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de omisi\u00f3n de la caracter\u00edstica de seguridad de BitLocker"
    }
  ],
  "id": "CVE-2022-41099",
  "lastModified": "2024-11-21T07:22:36.830",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "NONE",
          "baseScore": 4.6,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 3.6,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2022-11-09T22:15:22.980",
  "references": [
    {
      "source": "secure@microsoft.com",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-859V-858P-559V

Vulnerability from github – Published: 2022-11-10 12:01 – Updated: 2022-11-10 12:01

Details

BitLocker Security Feature Bypass Vulnerability.

Severity

4.6 (Medium)


                  
                    CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-41099"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-11-09T22:15:00Z",
    "severity": "MODERATE"
  },
  "details": "BitLocker Security Feature Bypass Vulnerability.",
  "id": "GHSA-859v-858p-559v",
  "modified": "2022-11-10T12:01:09Z",
  "published": "2022-11-10T12:01:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41099"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41099"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-41099

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

BitLocker Security Feature Bypass Vulnerability

Aliases

CVE-2022-41099

Aliases

CVE-2022-41099

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-41099",
    "id": "GSD-2022-41099"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-41099"
      ],
      "details": "BitLocker Security Feature Bypass Vulnerability",
      "id": "GSD-2022-41099",
      "modified": "2023-12-13T01:19:32.741932Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-41099",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Windows 10 Version 1809",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.17763.3650"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 21H1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19043.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 20H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19042.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 11 version 21H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.22000.1219"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 21H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19044.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 11 version 22H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.22621.819"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 22H2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.19045.2251"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1507",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.10240.19567"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1607",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "10.0.0",
                          "version_value": "10.0.14393.5501"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "BitLocker Security Feature Bypass Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Security Feature Bypass"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2022-41099"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "BitLocker Security Feature Bypass Vulnerability"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099",
              "refsource": "MISC",
              "tags": [],
              "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 0.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-03-10T18:15Z",
      "publishedDate": "2022-11-09T22:15Z"
    }
  }
}

MSRC_CVE-2022-41099

Vulnerability from csaf_microsoft - Published: 2022-11-08 08:00 - Updated: 2023-03-16 07:00

Summary

BitLocker Security Feature Bypass Vulnerability

Severity

Important

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.

CVE-2022-41099

4.6 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Affected products

Fixed 22 products

Product	Identifier	Version	Remediation
Windows 10 for 32-bit Systems 10.0.10240.19567 Windows 10 for 32-bit Systems		10.0.10240.19567
Windows 10 for x64-based Systems 10.0.10240.19567 Windows 10 for x64-based Systems		10.0.10240.19567
Windows 10 Version 1607 for 32-bit Systems 10.0.14393.5501 Windows 10 Version 1607 for 32-bit Systems		10.0.14393.5501
Windows 10 Version 1607 for x64-based Systems 10.0.14393.5501 Windows 10 Version 1607 for x64-based Systems		10.0.14393.5501
Windows 10 Version 1809 for 32-bit Systems 10.0.17763.3650 Windows 10 Version 1809 for 32-bit Systems		10.0.17763.3650
Windows 10 Version 1809 for x64-based Systems 10.0.17763.3650 Windows 10 Version 1809 for x64-based Systems		10.0.17763.3650
Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.3650 Windows 10 Version 1809 for ARM64-based Systems		10.0.17763.3650
Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2251 Windows 10 Version 20H2 for 32-bit Systems		10.0.19042.2251
Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2251 Windows 10 Version 20H2 for ARM64-based Systems		10.0.19042.2251
Windows 10 Version 21H1 for x64-based Systems 10.0.19043.2251 Windows 10 Version 21H1 for x64-based Systems		10.0.19043.2251
Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.2251 Windows 10 Version 21H1 for ARM64-based Systems		10.0.19043.2251
Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.2251 Windows 10 Version 21H1 for 32-bit Systems		10.0.19043.2251
Windows 11 version 21H2 for x64-based Systems 10.0.22000.1219 Windows 11 version 21H2 for x64-based Systems		10.0.22000.1219
Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.1219 Windows 11 version 21H2 for ARM64-based Systems		10.0.22000.1219
Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.2251 Windows 10 Version 21H2 for 32-bit Systems		10.0.19044.2251
Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.2251 Windows 10 Version 21H2 for ARM64-based Systems		10.0.19044.2251
Windows 10 Version 21H2 for x64-based Systems 10.0.19044.2251 Windows 10 Version 21H2 for x64-based Systems		10.0.19044.2251
Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.819 Windows 11 Version 22H2 for ARM64-based Systems		10.0.22621.819
Windows 11 Version 22H2 for x64-based Systems 10.0.22621.819 Windows 11 Version 22H2 for x64-based Systems		10.0.22621.819
Windows 10 Version 22H2 for x64-based Systems 10.0.19045.2251 Windows 10 Version 22H2 for x64-based Systems		10.0.19045.2251
Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.2251 Windows 10 Version 22H2 for ARM64-based Systems		10.0.19045.2251
Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.2251 Windows 10 Version 22H2 for 32-bit Systems		10.0.19045.2251

Known affected 22 products

Product	Version	Remediation
Windows 10 Version 22H2 for 32-bit Systems <10.0.19045.2251 Windows 10 Version 22H2 for 32-bit Systems	<10.0.19045.2251	Vendor Fix fix
Windows 10 Version 22H2 for ARM64-based Systems <10.0.19045.2251 Windows 10 Version 22H2 for ARM64-based Systems	<10.0.19045.2251	Vendor Fix fix
Windows 10 Version 22H2 for x64-based Systems <10.0.19045.2251 Windows 10 Version 22H2 for x64-based Systems	<10.0.19045.2251	Vendor Fix fix
Windows 11 Version 22H2 for x64-based Systems <10.0.22621.819 Windows 11 Version 22H2 for x64-based Systems	<10.0.22621.819	Vendor Fix fix
Windows 11 Version 22H2 for ARM64-based Systems <10.0.22621.819 Windows 11 Version 22H2 for ARM64-based Systems	<10.0.22621.819	Vendor Fix fix
Windows 10 Version 21H2 for x64-based Systems <10.0.19044.2251 Windows 10 Version 21H2 for x64-based Systems	<10.0.19044.2251	Vendor Fix fix
Windows 10 Version 21H2 for ARM64-based Systems <10.0.19044.2251 Windows 10 Version 21H2 for ARM64-based Systems	<10.0.19044.2251	Vendor Fix fix
Windows 10 Version 21H2 for 32-bit Systems <10.0.19044.2251 Windows 10 Version 21H2 for 32-bit Systems	<10.0.19044.2251	Vendor Fix fix
Windows 11 version 21H2 for ARM64-based Systems <10.0.22000.1219 Windows 11 version 21H2 for ARM64-based Systems	<10.0.22000.1219	Vendor Fix fix
Windows 11 version 21H2 for x64-based Systems <10.0.22000.1219 Windows 11 version 21H2 for x64-based Systems	<10.0.22000.1219	Vendor Fix fix
Windows 10 Version 21H1 for 32-bit Systems <10.0.19043.2251 Windows 10 Version 21H1 for 32-bit Systems	<10.0.19043.2251	Vendor Fix fix
Windows 10 Version 21H1 for ARM64-based Systems <10.0.19043.2251 Windows 10 Version 21H1 for ARM64-based Systems	<10.0.19043.2251	Vendor Fix fix
Windows 10 Version 21H1 for x64-based Systems <10.0.19043.2251 Windows 10 Version 21H1 for x64-based Systems	<10.0.19043.2251	Vendor Fix fix
Windows 10 Version 20H2 for ARM64-based Systems <10.0.19042.2251 Windows 10 Version 20H2 for ARM64-based Systems	<10.0.19042.2251	Vendor Fix fix
Windows 10 Version 20H2 for 32-bit Systems <10.0.19042.2251 Windows 10 Version 20H2 for 32-bit Systems	<10.0.19042.2251	Vendor Fix fix
Windows 10 Version 1809 for ARM64-based Systems <10.0.17763.3650 Windows 10 Version 1809 for ARM64-based Systems	<10.0.17763.3650	Vendor Fix fix
Windows 10 Version 1809 for x64-based Systems <10.0.17763.3650 Windows 10 Version 1809 for x64-based Systems	<10.0.17763.3650	Vendor Fix fix
Windows 10 Version 1809 for 32-bit Systems <10.0.17763.3650 Windows 10 Version 1809 for 32-bit Systems	<10.0.17763.3650	Vendor Fix fix
Windows 10 Version 1607 for x64-based Systems <10.0.14393.5501 Windows 10 Version 1607 for x64-based Systems	<10.0.14393.5501	Vendor Fix fix
Windows 10 Version 1607 for 32-bit Systems <10.0.14393.5501 Windows 10 Version 1607 for 32-bit Systems	<10.0.14393.5501	Vendor Fix fix
Windows 10 for x64-based Systems <10.0.10240.19567 Windows 10 for x64-based Systems	<10.0.10240.19567	Vendor Fix fix
Windows 10 for 32-bit Systems <10.0.10240.19567 Windows 10 for 32-bit Systems	<10.0.10240.19567	Vendor Fix fix

Threats

Impact Security Feature Bypass

Exploit Status Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely

References

7 references

URL	Category
https://msrc.microsoft.com/update-guide/vulnerabi…	self
https://msrc.microsoft.com/csaf/2022/msrc_cve-202…	self
https://www.microsoft.com/en-us/msrc/exploitabili…	external
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/update-guide/vulnerabi…	self
https://msrc.microsoft.com/update-guide/vulnerabi…	self

Acknowledgments

Anonymous

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Anonymous"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-41099 BitLocker Security Feature Bypass Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
      },
      {
        "category": "self",
        "summary": "CVE-2022-41099 BitLocker Security Feature Bypass Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-41099.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "BitLocker Security Feature Bypass Vulnerability",
    "tracking": {
      "current_release_date": "2023-03-16T07:00:00.000Z",
      "generator": {
        "date": "2025-01-02T21:31:19.585Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-41099",
      "initial_release_date": "2022-11-08T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-11-08T08:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2023-01-10T08:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "The following updates have been made: 1) Added an FAQ with further steps customers need to take to protect the Windows Recovery Environment (WinRE) from this vulnerability. 2) Added an FAQ to further clarify that offline images are not affected by this vulnerability. These are informational changes only."
        },
        {
          "date": "2023-01-19T08:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Updated the FAQs to further clarify the update guidance for this CVE. This is an informational change only."
        },
        {
          "date": "2023-02-07T08:00:00.000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "The following updates have been made: 1) Added an FAQ to explain that a BitLocker encrypted drive cannot be accessed via an artibrary WinRE WIM hosted on an external drive. 2) Revised FAQ to clarify that the exploit is only possible with the winre.wim on the recovery partition of the device."
        },
        {
          "date": "2023-02-24T08:00:00.000Z",
          "legacy_version": "1.4",
          "number": "5",
          "summary": "Added an FAQ to explain that the vulnerability cannot be exploited if the user is protected by BitLocker TPM+PIN. This is an informational change only."
        },
        {
          "date": "2023-03-16T07:00:00.000Z",
          "legacy_version": "1.5",
          "number": "6",
          "summary": "Added an FAQ to inform customers that a sample script is now available to help automate updating WinRE from the running Windows OS. See [KB5025175: Updating the WinRE partition on deployed devices to address security vulnerabilities in\u202fCVE-2022-41099](https://support.microsoft.com/help/5025175) for more information."
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems \u003c10.0.17763.3650",
              "product_id": "18"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for 32-bit Systems 10.0.17763.3650",
              "product_id": "11568"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems \u003c10.0.17763.3650",
              "product_id": "17"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for x64-based Systems 10.0.17763.3650",
              "product_id": "11569"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for ARM64-based Systems \u003c10.0.17763.3650",
              "product_id": "16"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.17763.3650",
            "product": {
              "name": "Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.3650",
              "product_id": "11570"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1809 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for x64-based Systems \u003c10.0.19043.2251",
              "product_id": "13"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for x64-based Systems 10.0.19043.2251",
              "product_id": "11896"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H1 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for ARM64-based Systems \u003c10.0.19043.2251",
              "product_id": "12"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for ARM64-based Systems 10.0.19043.2251",
              "product_id": "11897"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H1 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for 32-bit Systems \u003c10.0.19043.2251",
              "product_id": "11"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19043.2251",
            "product": {
              "name": "Windows 10 Version 21H1 for 32-bit Systems 10.0.19043.2251",
              "product_id": "11898"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H1 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for 32-bit Systems \u003c10.0.19042.2251",
              "product_id": "15"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2251",
              "product_id": "11801"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 20H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for ARM64-based Systems \u003c10.0.19042.2251",
              "product_id": "14"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19042.2251",
            "product": {
              "name": "Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2251",
              "product_id": "11802"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 20H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for x64-based Systems \u003c10.0.22000.1219",
              "product_id": "10"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for x64-based Systems 10.0.22000.1219",
              "product_id": "11926"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for ARM64-based Systems \u003c10.0.22000.1219",
              "product_id": "9"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22000.1219",
            "product": {
              "name": "Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.1219",
              "product_id": "11927"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems \u003c10.0.19044.2251",
              "product_id": "8"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.2251",
              "product_id": "11929"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems \u003c10.0.19044.2251",
              "product_id": "7"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.2251",
              "product_id": "11930"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems \u003c10.0.19044.2251",
              "product_id": "6"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19044.2251",
            "product": {
              "name": "Windows 10 Version 21H2 for x64-based Systems 10.0.19044.2251",
              "product_id": "11931"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 21H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems \u003c10.0.22621.819",
              "product_id": "5"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.819",
              "product_id": "12085"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems \u003c10.0.22621.819",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.22621.819",
            "product": {
              "name": "Windows 11 Version 22H2 for x64-based Systems 10.0.22621.819",
              "product_id": "12086"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 11 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems \u003c10.0.19045.2251",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for x64-based Systems 10.0.19045.2251",
              "product_id": "12097"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems \u003c10.0.19045.2251",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.2251",
              "product_id": "12098"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for ARM64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems \u003c10.0.19045.2251",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.19045.2251",
            "product": {
              "name": "Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.2251",
              "product_id": "12099"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 22H2 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.19567",
            "product": {
              "name": "Windows 10 for 32-bit Systems \u003c10.0.10240.19567",
              "product_id": "22"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.19567",
            "product": {
              "name": "Windows 10 for 32-bit Systems 10.0.10240.19567",
              "product_id": "10729"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.10240.19567",
            "product": {
              "name": "Windows 10 for x64-based Systems \u003c10.0.10240.19567",
              "product_id": "21"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.10240.19567",
            "product": {
              "name": "Windows 10 for x64-based Systems 10.0.10240.19567",
              "product_id": "10735"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 for x64-based Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems \u003c10.0.14393.5501",
              "product_id": "20"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for 32-bit Systems 10.0.14393.5501",
              "product_id": "10852"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems \u003c10.0.14393.5501",
              "product_id": "19"
            }
          },
          {
            "category": "product_version",
            "name": "10.0.14393.5501",
            "product": {
              "name": "Windows 10 Version 1607 for x64-based Systems 10.0.14393.5501",
              "product_id": "10853"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows 10 Version 1607 for x64-based Systems"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-41099",
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "A successful attacker could bypass the BitLocker Device Encryption feature on the system storage device. An attacker with physical access to the target could exploit this vulnerability to gain access to encrypted data.",
          "title": "What kind of security feature could be bypassed by successfully exploiting this vulnerability?"
        },
        {
          "category": "faq",
          "text": "Yes. You must apply the applicable Windows security update to your Windows Recovery Environment (WinRE). For more information about how to apply the WinRE update, see Add an update package to Windows RE.\nIMPORTANT: End users and enterprises who are updating Windows devices which are already deployed in their environment can instead use the latest Windows Safe OS Dynamic Updates to update WinRE when the partition is too small to install the full Windows update. You can download the latest Windows Safe OS Dynamic Update from the Microsoft Update Catalog.",
          "title": "Are there additional steps that I need to take to be protected from this vulnerability?"
        },
        {
          "category": "faq",
          "text": "No. The exploit is only possible with the winre.wim on the recovery partition of the device.",
          "title": "Can a bootable Windows ISO or USB flash drive that boot to Windows RE be used to exploit this vulnerability?"
        },
        {
          "category": "faq",
          "text": "No. A BitLocker encrypted drive cannot be accessed via an arbitrary WinRE WIM file hosted on an external drive. Please complete all steps in [Microsoft Learn | Add an Update to Windows RE | Apply the update to a running PC  to ensure that the updated Windows RE image is turned on and correctly configured for your Windows installation.",
          "title": "Can a vulnerable version of WinRE WIM file be used to exploit this vulnerability?"
        },
        {
          "category": "faq",
          "text": "No. To exploit the vulnerability the attacker needs to know the TPM PIN if the user is protected by the BitLocker TPM+PIN.",
          "title": "If TPM+PIN BitLocker protectors are being used, can the vulnerability be exploited if the attacker does not know the TPM PIN?"
        },
        {
          "category": "faq",
          "text": "Yes. Microsoft has developed a sample script that can help you automate updating WinRE from the running Windows OS. Please see KB5025175: Updating the WinRE partition on deployed devices to address security vulnerabilities in\u202fCVE-2022-41099 for more information.",
          "title": "Is there a way I can automate the process of updating WinRE on my Windows devices which have already been deployed?"
        }
      ],
      "product_status": {
        "fixed": [
          "10729",
          "10735",
          "10852",
          "10853",
          "11568",
          "11569",
          "11570",
          "11801",
          "11802",
          "11896",
          "11897",
          "11898",
          "11926",
          "11927",
          "11929",
          "11930",
          "11931",
          "12085",
          "12086",
          "12097",
          "12098",
          "12099"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-41099 BitLocker Security Feature Bypass Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
        },
        {
          "category": "self",
          "summary": "CVE-2022-41099 BitLocker Security Feature Bypass Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.17763.3650:Security Update:https://support.microsoft.com/help/5019966",
          "product_ids": [
            "18",
            "17",
            "16"
          ],
          "url": "https://support.microsoft.com/help/5019966"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19043.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "13",
            "12",
            "11"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19042.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "15",
            "14"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.22000.1219:Security Update:https://support.microsoft.com/help/5019961",
          "product_ids": [
            "10",
            "9"
          ],
          "url": "https://support.microsoft.com/help/5019961"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19044.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "8",
            "7",
            "6"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.22621.819:Security Update:https://support.microsoft.com/help/5019980",
          "product_ids": [
            "5",
            "4"
          ],
          "url": "https://support.microsoft.com/help/5019980"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.19045.2251:Security Update:https://support.microsoft.com/help/5019959",
          "product_ids": [
            "3",
            "2",
            "1"
          ],
          "url": "https://support.microsoft.com/help/5019959"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.10240.19567:Security Update:https://support.microsoft.com/help/5019970",
          "product_ids": [
            "22",
            "21"
          ],
          "url": "https://support.microsoft.com/help/5019970"
        },
        {
          "category": "vendor_fix",
          "date": "2022-11-08T08:00:00.000Z",
          "details": "10.0.14393.5501:Security Update:https://support.microsoft.com/help/5019964",
          "product_ids": [
            "20",
            "19"
          ],
          "url": "https://support.microsoft.com/help/5019964"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 4.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Security Feature Bypass"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
        }
      ],
      "title": "BitLocker Security Feature Bypass Vulnerability"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2022-41099 (GCVE-0-2022-41099)

CERTFR-2022-AVI-1012

Solution

CERTFR-2022-AVI-1012

Solution

BDU:2022-06834

FKIE_CVE-2022-41099

GHSA-859V-858P-559V

GSD-2022-41099

MSRC_CVE-2022-41099

Tags

Sightings

Nomenclature