CVE-2025-55330

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.2

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

I

mproper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55330	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_11_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_23h2::::::::
	cpe:2.3:o:microsoft:windows_11_24h2::::::::
	cpe:2.3:o:microsoft:windows_11_25h2::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
	cpe:2.3:o:microsoft:windows_server_2025::::::::

History

27 Oct 2025, 14:55

Type	Values Removed	Values Added
CPE		cpe:2.3:o:microsoft:windows_11_23h2:::::::: cpe:2.3:o:microsoft:windows_server_2025:::::::: cpe:2.3:o:microsoft:windows_11_24h2:::::::: cpe:2.3:o:microsoft:windows_11_22h2:::::::: cpe:2.3:o:microsoft:windows_11_25h2:::::::: cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55330 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55330 - Vendor Advisory
First Time		Microsoft windows 11 22h2 Microsoft windows 11 23h2 Microsoft Microsoft windows Server 2022 23h2 Microsoft windows 11 25h2 Microsoft windows 11 24h2 Microsoft windows Server 2025

14 Oct 2025, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-10-14 17:15

Updated : 2025-10-27 14:55

NVD link : CVE-2025-55330

Mitre link : CVE-2025-55330

CVE.ORG link : CVE-2025-55330

JSON object : View

Products Affected

CWE

CWE-841

Improper Enforcement of Behavioral Workflow

{"id": "CVE-2025-55330", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.9}]}, "published": "2025-10-14T17:15:45.930", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55330", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-841"}]}], "descriptions": [{"lang": "en", "value": "Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack."}], "lastModified": "2025-10-27T14:55:48.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A", "versionEndExcluding": "10.0.22621.6060"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A", "versionEndExcluding": "10.0.22631.6060"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D", "versionEndExcluding": "10.0.26100.6899"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5", "versionEndExcluding": "10.0.26200.6899"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600", "versionEndExcluding": "10.0.25398.1913"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869", "versionEndExcluding": "10.0.26100.6899"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}