PT-2023-9845 · Microsoft · Windows Bitlocker+1

Zammis Clark · CVE-2023-21563 · Published 2023-01-10 · Updated 2026-05-12

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows BitLocker (affected versions not specified)

Description A security-feature bypass issue exists in the Windows BitLocker component caused by a race condition, which occurs when multiple processes attempt to access the same resource simultaneously. This flaw allows an attacker with brief physical access and network connectivity to bypass encryption and gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2025-00727

CVE-2023-21563

Affected Products

Windows

Windows Bitlocker

References · 30

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21563 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21563 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-21563 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-21563 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00727 · Security Note
• https://t.me/purp_sec/634 · Telegram Post
• https://t.me/echeloneyes/1060 · Telegram Post
• https://twitter.com/windowsforum/status/1874855892597817630 · Twitter Post
• https://twitter.com/GHak2learn27752/status/1875121226856976506 · Twitter Post
• https://twitter.com/banthisguy9349/status/1736887697963139550 · Twitter Post
• https://twitter.com/v1ckxy_overdose/status/1951808442059968845 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1875530713937694828 · Twitter Post
• https://twitter.com/weezerOSINT/status/2054299779182784825 · Twitter Post
• https://twitter.com/Dinosn/status/1922853659798335634 · Twitter Post