CVE-2015-2552

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows physically proximate attackers to bypass the Trusted Boot protection mechanism, and consequently interfere with the integrity of code, BitLocker, Device Encryption, and Device Health Attestation, via a crafted Boot Configuration Data (BCD) setting, aka "Trusted Boot Security Feature Bypass Vulnerability."

Affected products

Bitlocker, Device Encryption, Windows, Windows 10, Windows 8, Windows Rt 8, Windows Rt 8.1, Windows Server 2012

Microsoft Windows 10

All versions

Microsoft Windows 7

All versions

Microsoft Windows 8

All versions

Microsoft Windows 8.1

All versions

Microsoft Windows Rt

All versions

Microsoft Windows Rt 8.1

All versions

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

1.7% (75th percentile)

Weakness

CWE-254

NVD status

Modified

Published

2015-10-14