CVE Catalog

CVE-2025-59326

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

6th percentile - higher than 6% of all known CVEs

Summary

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations.

Risk Assessment

An attacker could execute unauthorized code from temporary file systems, potentially compromising system integrity.

Recommendation

It is recommended to update to version 7.7.4 or later and enable/configure IMA policy for all file systems.

Original NVD description (English source)

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS