PT-2022-5505 · Microsoft · Windows Bitlocker+1

Published 2022-11-08 · Updated 2026-05-12 · CVE-2022-41099

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description A security feature bypass issue exists in the BitLocker Device Encryption of Windows operating systems due to security configuration errors. This flaw allows an attacker to bypass security restrictions and affect the system, particularly in configurations using BitLocker with TPM only.

Recommendations Apply the script provided by Microsoft to fix the WinRE BitLocker bypass flaw.

Exploit

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2022-06834

CVE-2022-41099

Affected Products

Windows

Windows Bitlocker

References · 27

• 🔥 https://github.com/halsey51013/UpdateWindowsRE-CVE-2022-41099 · Exploit
• 🔥 https://github.com/o0MattE0o/CVE-2022-41099-Fix · Exploit
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41099 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-41099 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41099 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-41099 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06834 · Security Note
• https://twitter.com/IT_news_for_all/status/1691382674500313088 · Twitter Post
• https://twitter.com/MHimken/status/1744974038315786705 · Twitter Post
• https://twitter.com/akaclandestine/status/1700075563090694436 · Twitter Post
• https://t.me/hybgl/1726 · Telegram Post
• https://t.me/sysadm_in_channel/4513 · Telegram Post
• https://twitter.com/weezerOSINT/status/2054299779182784825 · Twitter Post
• https://t.me/ckure/12225 · Telegram Post