Weakness (CWE)

CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data

Base Draft

The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

Source: MITRE CWE-349

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.8

CVE-2025-48804 Public exploit

Windows BitLocker Security Feature Bypass Vulnerability

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 8, 2025

CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data

Windows BitLocker Security Feature Bypass Vulnerability