WinRE BitLocker Security Feature Bypass

CVE-2024-20666 is a BitLocker Device Encryption security-feature bypass requiring physical access to an affected device. Microsoft states that exploitation depends on the WinRE image on the device's recovery partition; booting arbitrary external WinRE media or using a separate vulnerable WinRE image is not sufficient. If BitLocker TPM+PIN protection is enabled, the attacker must know the PIN. A successful exploit can provide access to encrypted data on the system storage device. Microsoft's public advisory does not publish a reproducible exploit command sequence.