← Back

CVE-2025-48804

nvd nist
Published: Jul 8, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Affected (18)

Microsoft
14 products
Windows 10 1507
Windows 10 1607
Windows 10 1809
Windows 10 21h2
Windows 10 22h2
Windows 11 22h2
Windows 11 23h2
Windows 11 24h2
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2022 23h2
Windows Server 2025
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 10 1507
version < 10.0.10240.21073
Windows 10 1507
version < 10.0.10240.21073
Microsoft
Windows 10 1607
version < 10.0.14393.8246
Windows 10 1607
version < 10.0.14393.8246
Microsoft
Windows 10 1809
version < 10.0.17763.7558
Windows 10 1809
version < 10.0.17763.7558
Windows 10 21h2
version < 10.0.19044.6093
Windows 10 22h2
version < 10.0.19045.6093
Windows 11 22h2
version < 10.0.22621.5624
Windows 11 23h2
version < 10.0.22631.5624
Windows 11 24h2
version < 10.0.26100.4652
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2
Windows Server 2016
version < 10.0.14393.8246
Windows Server 2019
version < 10.0.17763.7558
Windows Server 2022
version < 10.0.20348.3932
Windows Server 2022 23h2
version < 10.0.25398.1732
Windows Server 2025
version < 10.0.26100.4652

Related CWEs

CWE-349
Acceptance of Extraneous Untrusted Data With Trusted Data
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.