CVE-2025-48804

CVE-2025-48804 describes a vulnerability in Microsoft Windows BitLocker where extraneous untrusted data can be accepted alongside trusted data, allowing an unauthorized attacker to bypass a security feature through a physical attack. This medium-severity flaw (CVSS 6.8) requires physical access to the device (AV:P) but has low attack complexity (AC:L) and no user interaction (UI:N), potentially leading to high confidentiality, integrity, and availability impacts (C:H/I:H/A:H). Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB: None), it is not listed in the KEV catalog, and community discussion and media coverage are minimal, indicating low active exploitation or widespread attention at this time.