On: BitLocker Lockscreen Bypass

[amluto]

They didn’t fix the insecure directory creation when media is mounted?

[shawnz → amluto]

Yes, that seems to be the much more concerning aspect of this vulnerability.

Without that, this vulnerability seems to only let you create local unprivileged user accounts which isn't such a big deal.

[gmueckl → shawnz]

It's not as big a deal, but not without impact. You only need a local privilege escalation to go from a user with no rights to a fully open system. And systems are much harder to secure against code running on them with access to all those juicy kernel facing unprivileged APIs...