New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

A new zero-day vulnerability dubbed GreatXML allows unauthorized access to Windows BitLocker encryption. The exploit reportedly utilizes specific XML files located within the recovery partition to bypass existing security measures. Coverage from TechRepublic, SecurityWeek, and HotHardware highlights the discovery alongside another zero-day identified as RoguePlanet.

Reports from BleepingComputer and Dark Reading note that RoguePlanet grants SYSTEM privileges through Microsoft Defender. Thestack.technology emphasizes that these disclosures coincide with the June Patch Tuesday release cycle. Observers are tracking the response from Microsoft regarding the disclosure fight and the efficacy of subsequent patches.

MakeUseOf notes that the practical impact of the BitLocker exploit may vary for individual users, though official documentation on mitigation steps remains the primary focus.