PT-2025-28537 · Microsoft · Windows Bitlocker+1

Alon Leviev + 2 · Published 2025-07-08 · Updated 2026-05-24 · CVE-2025-48804

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows BitLocker (affected versions not specified)

Description An issue exists where the acceptance of extraneous untrusted data alongside trusted data allows an unauthorized attacker to bypass a security feature. This exploit requires physical access to the system and can be achieved through a downgrade attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-349

Related Identifiers

BDU:2025-08360

CVE-2025-48804

Affected Products

Windows

Windows Bitlocker

References · 23

• https://nvd.nist.gov/vuln/detail/CVE-2025-48804 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48804 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-48804 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48804 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48804 · Security Note
• https://bdu.fstec.ru/vul/2025-08360 · Security Note
• https://reddit.com/r/CVEWatch/comments/1t92tju/top_10_trending_cves_10052026 · Reddit Post
• https://twitter.com/trerbbb/status/2054054029466927528 · Twitter Post
• https://twitter.com/Im_Azmir/status/2054803967901909011 · Twitter Post
• https://t.me/secharvester/22369 · Telegram Post
• https://twitter.com/UndercodeUpdate/status/2054077040400166943 · Twitter Post
• https://twitter.com/Dinosn/status/2052609829659684999 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1t80prx/top_10_trending_cves_09052026 · Reddit Post
• https://twitter.com/CVEnew/status/1942958432467746880 · Twitter Post
• https://twitter.com/dailycve/status/1945168780939649394 · Twitter Post