Medium severity5.5NVD Advisory· Published Sep 3, 2008· Updated Jun 16, 2026

CVE-2008-3893

Description

Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.

Affected products

Microsoft/Windows2 versions
cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*
Microsoft/Windows BitLockerllm-create
Range: < Vista SP1
Microsoft/Windows Vistallm-fuzzy
Range: < SP1

Patches

Vulnerability mechanics

References

secunia.com/advisories/31619nvdVendor Advisory
www.ivizsecurity.com/security-advisory-iviz-sr-0801.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000