Acceptance of Extraneous Untrusted Data With Trusted Data in Windows and Windows Server - CVE-2025-48804

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU112634

Acceptance of Extraneous Untrusted Data With Trusted Data in Windows and Windows Server - CVE-2025-48804

Published: July 9, 2025 / Updated: May 22, 2026


Vulnerability identifier: #VU112634
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear
CVE-ID: CVE-2025-48804
CWE-ID: CWE-349
Exploitation vector: Local access
Exploit availability: Public exploit is available
Vendor: Microsoft
Affected software:
Windows
Windows Server

Detailed vulnerability description

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to acceptance of extraneous untrusted data with trusted data in BitLocker. An attacker with physical access can bypass the BitLocker Device Encryption feature on the system storage device.


How to mitigate CVE-2025-48804

Install updates from vendor's website.

Sources