CVE-2025-59326
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Deferred - cve@mitre.org
- Published
- 2026-08-12
- Last modified
- 2026-08-13
- Weaknesses
- CWE-693
References
- https://i.blackhat.com/BH-USA-26/Presentations/US-26-Burch-The-Cost-of-Obscurity-Wednesday.pdf
- https://i.blackhat.com/BH-USA-26/Presentations/US-26-Burch-The-Cost-of-Obscurity-wp.pdf
- https://www.cpsd.at/blog/
