CVE-2025-21210

Summary

CVE-2025-21210 is a newly disclosed vulnerability affecting Windows BitLocker, an encryption feature used to secure data in Microsoft's operating system. This information disclosure issue allows an attacker, who gains valid logon credentials or physical access to an affected system, to retrieve sensitive information related to BitLocker-protected drives. The vulnerability could potentially reveal drive letters, volume labels, and encryption status, posing a risk to data confidentiality. Microsoft has released a patch to address this issue, and users are strongly encouraged to apply it promptly to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.