PT-2025-1212 · Microsoft · Windows Bitlocker+1

Maxim Suhanov · Published 2025-01-14 · Updated 2025-02-04 · CVE-2025-21210

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows BitLocker (affected versions not specified)

Description A critical issue in Windows BitLocker exposes the encryption mechanism to a novel randomization attack targeting the AES-XTS mode. This allows attackers to bypass BitLocker encryption by corrupting a registry key, causing unencrypted hibernation images to be written to disk. The attack, known as CrashXTS, can compromise encrypted data by finding and corrupting a specific 16-byte block to leak unencrypted hibernation images. This issue risks sensitive data and poses significant risks to data security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-636

Related Identifiers

BDU:2025-00591

CVE-2025-21210

Affected Products

Windows

Windows Bitlocker

References · 29

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21210 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00591 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21210 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21210 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21210 · Security Note
• https://twitter.com/techuncut_com/status/1884033914085200196 · Twitter Post
• https://twitter.com/adriananglin/status/1883915665482059848 · Twitter Post
• https://twitter.com/fletch_ai/status/1879453615288652044 · Twitter Post
• https://twitter.com/S0ufi4n3/status/1882170945638699482 · Twitter Post
• https://twitter.com/CVEnew/status/1880761199823818850 · Twitter Post
• https://twitter.com/emruz/status/1882107961469800720 · Twitter Post
• https://twitter.com/tatha_gautama/status/1883668766472696205 · Twitter Post
• https://twitter.com/gbhackers_news/status/1881895495293161626 · Twitter Post
• https://twitter.com/IT_news_for_all/status/1881727654681776358 · Twitter Post