The only evidence I have seen was this article that another user in the thread shared: https://blog.scrt.ch/2024/10/28/privilege-escalation-through-tpm-sniffin

The only evidence I have seen was this article that another user in the thread shared: https://blog.scrt.ch/2024/10/28/privilege-escalation-through-tpm-sniffing-when-bitlocker-pin-is-enabled/ https://blog.scrt.ch/2024/10/28/privilege-escalation-through... Not saying you're wrong, I'm just not sure how well known it really is. Either way... if the TPM is the one gating the key behind a PIN, I really don't see how an OS-level exploit can work without knowing the PIN in advance.