CVE-2024-20665

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Apr 9, 2024
Updated: Jan 6, 2025
CWE ID 693

Summary

CVE-2024-20665 is a newly disclosed vulnerability affecting BitLocker, a full disk encryption feature included in Microsoft Windows. This issue permits an attacker to bypass BitLocker's security features, potentially allowing unauthorized access to encrypted data. The vulnerability could be exploited through specially crafted USB drives, bypassing the requirement for user interaction or knowledge of the encryption password. Successful exploitation could result in data theft or unauthorized access to sensitive information. Microsoft is currently working on a patch to address this vulnerability and users are encouraged to apply it as soon as it becomes available.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share