This vulnerability, identified as CVE-2026-27913, is caused by improper input validation in the Windows BitLocker component of Microsoft Windows Server 2012 (version 6.2.9200.0). The flaw enables a local attacker without privileges or user interaction to bypass BitLocker's security protections. The CVSS 3.1 base score is 7.7, indicating high severity with high impact on confidentiality and integrity but no impact on availability. Microsoft has published an official fix for this vulnerability.

An unauthorized local attacker can bypass BitLocker security features, potentially leading to unauthorized access to protected data. The vulnerability impacts confidentiality and integrity but does not affect system availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users of Windows Server 2012 version 6.2.9200.0 should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27913 to remediate this vulnerability.