CVE-2025-48804

Published Jul 8, 2025

Last updated a year ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-48804 is a vulnerability found in Windows BitLocker that enables an unauthorized attacker to bypass a security feature through a physical attack. This bypass occurs due to the system's acceptance of extraneous untrusted data alongside trusted data. More specifically, this vulnerability can be exploited by leveraging Windows Recovery Environment (WinRE) app trust validation. An attacker can utilize the pre-registered `SetupPlatform.exe` to gain persistent command-line access through keyboard shortcuts, thereby circumventing BitLocker's protections.

Description: Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_22h2, windows_11_23h2, windows_11_24h2, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.8
Impact score: 5.9
Exploitability score: 0.9
Vector string: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Weaknesses

secure@microsoft.com: CWE-349

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "9D58CEDA-0611-4E21-87AF-C368F45BB685",
            "versionEndExcluding": "10.0.10240.21073",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "1EEA1F09-0FA7-4946-8005-F0CF177B1103",
            "versionEndExcluding": "10.0.10240.21073",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "3CEAC32A-5246-4F6B-8DD5-E49F3BA621DA",
            "versionEndExcluding": "10.0.14393.8246",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "E0A0243D-52B4-49AE-B1AE-263640C492B0",
            "versionEndExcluding": "10.0.14393.8246",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "2062C268-282B-4E52-9F8C-876A2D483EAD",
            "versionEndExcluding": "10.0.17763.7558",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "00FCA704-C6E0-4DE4-86F0-80552527AE53",
            "versionEndExcluding": "10.0.17763.7558",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "50848190-CF61-47F6-90B8-DB0C120749F5",
            "versionEndExcluding": "10.0.19044.6093",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "01E62E99-5EDA-487C-A941-E2DA348B501F",
            "versionEndExcluding": "10.0.19045.6093",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "76FEE1E8-EB22-4E01-86D7-13B35F9D2876",
            "versionEndExcluding": "10.0.22621.5624",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "19D0DAB7-4BFF-4BB7-9E0E-B020CF8573C9",
            "versionEndExcluding": "10.0.22631.5624",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8E866DB2-9CA7-4BCC-8591-9BC94300B779",
            "versionEndExcluding": "10.0.26100.4652",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F6FA4941-0641-4EA0-99A8-97121F625380",
            "versionEndExcluding": "10.0.14393.8246",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "DCFD9FA0-D149-422A-975C-582C9BC9024D",
            "versionEndExcluding": "10.0.17763.7558",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "AE46D39E-7048-4A31-9753-39F6E5F97D1D",
            "versionEndExcluding": "10.0.20348.3932",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "613302B8-D5C2-4908-9FC9-0EC1650D4517",
            "versionEndExcluding": "10.0.25398.1732",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "10E640FB-32AB-45B6-BC42-56CC587C0A35",
            "versionEndExcluding": "10.0.26100.4652",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.