#VU112634 Acceptance of Extraneous Untrusted Data With Trusted Data in Windows and Windows Server - CVE-2025-48804

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU112634

#VU112634 Acceptance of Extraneous Untrusted Data With Trusted Data in Windows and Windows Server - CVE-2025-48804

Published: July 9, 2025


Vulnerability identifier: #VU112634
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-48804
CWE-ID: CWE-349
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
Windows
Windows Server
Software vendor:
Microsoft

Description

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to acceptance of extraneous untrusted data with trusted data in BitLocker. An attacker with physical access can bypass the BitLocker Device Encryption feature on the system storage device.


Remediation

Install updates from vendor's website.

External links