CVE-2025-59321 in Secure Disk for BitLocker

Résumé

par MITRE • 12/08/2026

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: MITRE
• Réserver: 12/09/2025
• Divulgation: 12/08/2026
• Modérer: accepté
• Entrée: VDB-389025
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-59321
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-59321
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-59321/