{"metadata": {"vulnerability": "CVE-2022-41099", "count": 42, "kinds": {"milestone": 6, "sighting": 15, "kev": 0, "other": 21}}, "data": [{"timestamp": "2022-09-19T00:00:00Z", "date_only": false, "value": "2022-09-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-41099", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2022-41099", "field": "containers.cna.datePublic"}, {"timestamp": "2022-11-08T08:00:00Z", "date_only": false, "value": "2022-11-08T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1012", "record": "CERTFR-2022-AVI-1012", "field": "last_revision_date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1012", "record": "CERTFR-2022-AVI-1012", "field": "initial_release_date"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-41099", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1012", "record": "CERTFR-2022-AVI-1012", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-09T22:15:00Z", "date_only": false, "value": "2022-11-09T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-859V-858P-559V", "record": "GHSA-859V-858P-559V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-09T22:15:00Z", "date_only": false, "value": "2022-11-09T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-41099", "record": "GSD-2022-41099", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-09T22:15:22.980Z", "date_only": false, "value": "2022-11-09T22:15:22.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41099", "record": "FKIE_CVE-2022-41099", "field": "published"}, {"timestamp": "2022-11-10T12:01:09Z", "date_only": false, "value": "2022-11-10T12:01:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-859V-858P-559V", "record": "GHSA-859V-858P-559V", "field": "published"}, {"timestamp": "2022-11-10T12:01:09Z", "date_only": false, "value": "2022-11-10T12:01:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-859V-858P-559V", "record": "GHSA-859V-858P-559V", "field": "modified"}, {"timestamp": "2023-01-10T08:00:00Z", "date_only": false, "value": "2023-01-10T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-01-19T08:00:00Z", "date_only": false, "value": "2023-01-19T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-02-07T08:00:00Z", "date_only": false, "value": "2023-02-07T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-02-24T08:00:00Z", "date_only": false, "value": "2023-02-24T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-03-10T18:15:00Z", "date_only": false, "value": "2023-03-10T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-41099", "record": "GSD-2022-41099", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-03-16T07:00:00Z", "date_only": false, "value": "2023-03-16T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-03-16T07:00:00Z", "date_only": false, "value": "2023-03-16T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-03-19T07:05:22Z", "date_only": false, "value": "2023-03-19T07:05:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/10811", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "1e7ec537-0c7c-4a7d-9073-b20febef9b91", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Microsoft shares script to fix WinRE BitLocker bypass flaw.\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099\n\nhttps://www.bleepingcomputer.com/news/security/microsoft-shares-script-to-fix-winre-bitlocker-bypass-flaw/", "url": "https://t.me/cKure/10811"}, {"timestamp": "2023-08-27T17:11:25Z", "date_only": false, "value": "2023-08-27T17:11:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ayNhhaciXe1fsjFFcsSlUSKQ6y7latiLTWsf0lshNdzB95s", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "1753e443-bc60-405a-aae0-dd2c78121f85"}, {"timestamp": "2023-09-03T21:54:51Z", "date_only": false, "value": "2023-09-03T21:54:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8958", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "b3383167-e329-4f7b-85f6-c4efddaf338e", "content": "#Threat_Research\n1. Analysis of a BitLocker Drive Encryption Bypass (CVE-2022-41099)\nhttps://blog.scrt.ch/2023/08/14/cve-2022-41099-analysis-of-a-bitlocker-drive-encryption-bypass\n2. What is a \"good\" Linux Kernel bug?\nhttps://blog.isosceles.com/what-is-a-good-linux-kernel-bug", "url": "https://t.me/CyberSecurityTechnologies/8958"}, {"timestamp": "2023-09-09T11:14:03Z", "date_only": false, "value": "2023-09-09T11:14:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RedTeamFeed/38", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "8b6a8f07-84ba-4597-a8d4-d37db6a1b854", "content": "CVE-2022-41099 - Analysis of a BitLocker Drive Encryption Bypass\n#itm4n\n\nIn November 2022, an advisory was published by Microsoft about a BitLocker bypass. This vulnerability caught my attention because the fix required a manual operation by users and system administrators, even after installing all the security updates. Couple this with the fact that the procedure was not well documented initially, and you have the perfect recipe for disaster. This is typically th...\n\nvia Itm4n Blog (author: itm4n)", "url": "https://t.me/RedTeamFeed/38"}, {"timestamp": "2023-10-14T12:17:03Z", "date_only": false, "value": "2023-10-14T12:17:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RedTeamFeed/77", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "0b7e1586-54e9-40a6-a217-38ca0f8bb187", "content": "A Deep Dive into TPM-based BitLocker Drive Encryption\n#itm4n\n\nWhen I investigated CVE-2022-41099, a BitLocker Drive Encryption bypass through the Windows Recovery Environment (WinRE), the fact that the latter was able to transparently access an encrypted drive without requiring the recovery password struck me. My initial thought was that there had to be a way to reproduce this behavior and obtain the master key from the Recovery Environment (WinRE). The o...\n\nvia Itm4n Blog (author: itm4n)", "url": "https://t.me/RedTeamFeed/77"}, {"timestamp": "2023-12-13T01:19:32.741Z", "date_only": false, "value": "2023-12-13T01:19:32.741932Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-41099", "record": "GSD-2022-41099", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T12:35:49.367Z", "date_only": false, "value": "2024-08-03T12:35:49.367Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-41099", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-02T21:31:19.585Z", "date_only": false, "value": "2025-01-02T21:31:19.585Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41099", "record": "MSRC_CVE-2022-41099", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-18T02:00:05.271Z", "date_only": false, "value": "2026-07-18T02:00:05.271990Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/secdigestua/386", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "44d50a82-5208-407b-afe7-c249e4f8a268", "url": "https://t.me/secdigestua/386"}, {"timestamp": "2026-07-19T00:00:30.698Z", "date_only": false, "value": "2026-07-19T00:00:30.698128Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/secdigestua/386", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "7ab0f90e-8d99-46f4-8f7c-6d17b2b8a20d", "url": "https://t.me/secdigestua/386"}, {"timestamp": "2026-07-29T12:00:35.757Z", "date_only": false, "value": "2026-07-29T12:00:35.757169Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11522", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "f74833df-1acb-4f82-b3fb-739445d7a051", "url": "https://t.me/CVEhub/11522"}, {"timestamp": "2026-07-29T12:00:38.916Z", "date_only": false, "value": "2026-07-29T12:00:38.916901Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10707", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "91ffc844-9231-44a9-8450-acf49193c449", "url": "https://t.me/CVEhub/10707"}, {"timestamp": "2026-07-30T00:01:02.379Z", "date_only": false, "value": "2026-07-30T00:01:02.379455Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11522", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "b9c06dde-94f1-4a35-b5c5-7069ac5b7240", "url": "https://t.me/CVEhub/11522"}, {"timestamp": "2026-07-30T01:00:44.209Z", "date_only": false, "value": "2026-07-30T01:00:44.209594Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10707", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "f4603345-c120-441c-b49f-c8ea01d09828", "url": "https://t.me/CVEhub/10707"}, {"timestamp": "2026-07-31T03:00:03.788Z", "date_only": false, "value": "2026-07-31T03:00:03.788820Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11522", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "fd8585b3-a745-438f-bbea-b965bbc67602", "url": "https://t.me/CVEhub/11522"}, {"timestamp": "2026-07-31T06:00:04.113Z", "date_only": false, "value": "2026-07-31T06:00:04.113169Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10707", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "7401197f-89ba-4e5b-972c-e5cb1754b130", "url": "https://t.me/CVEhub/10707"}, {"timestamp": "2026-08-01T00:00:40.026Z", "date_only": false, "value": "2026-08-01T00:00:40.026085Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10707", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "cf1def51-c41d-40df-8e4a-3ce9c609aa12", "url": "https://t.me/CVEhub/10707"}, {"timestamp": "2026-08-01T00:00:43.395Z", "date_only": false, "value": "2026-08-01T00:00:43.395757Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11522", "record": "CVE-2022-41099", "field": "creation_timestamp", "uuid": "38bc6620-1f0a-49d8-aaf3-fa747e427a9f", "url": "https://t.me/CVEhub/11522"}, {"timestamp": "2026-08-10T15:11:43.208Z", "date_only": false, "value": "2026-08-10T15:11:43.208Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-41099", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:11:43.208Z", "date_only": false, "value": "2026-08-10T15:11:43.208Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2022-41099", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-10T16:18:22.193Z", "date_only": false, "value": "2026-08-10T16:18:22.193", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41099", "record": "FKIE_CVE-2022-41099", "field": "lastModified"}]}