CVEvulnerability

CVE-2025-59321

9.8 CRITICAL Published 2026-08-12 Modified 2026-09-29 Official page ↗
Status
Deferred
Published
2026-08-12
Last modified
2026-09-29
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1188

Description

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform.

Related

Weakness · CWE (1)

  • CWE-1188 Initialization of a Resource with an Insecure Default weakness

References