NetSight
medium6.8

CVE-2025-48804

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical att…

Impact

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1507
before 10.0.10240.21073
MicrosoftWindows 10 1607
before 10.0.14393.8246
MicrosoftWindows 10 1809
before 10.0.17763.7558
MicrosoftWindows 10 21h2
before 10.0.19044.6093
MicrosoftWindows 10 22h2
before 10.0.19045.6093
MicrosoftWindows 11 22h2
before 10.0.22621.5624
MicrosoftWindows 11 23h2
before 10.0.22631.5624
MicrosoftWindows 11 24h2
before 10.0.26100.4652
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.8246
MicrosoftWindows Server 2019
before 10.0.17763.7558
MicrosoftWindows Server 2022
before 10.0.20348.3932

Weakness classification

References