| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2023-1017 | TPM2.0 Module Library Elevation of Privilege Vulnerability | Windows 11 | Critical | 20-03-2023 |
Technical Information
An elevation of privilege vulnerability by leveraging malicious TPM commands from a guest VM to a target running Hyper-V, an attacker can cause an out of bounds write in the root partition.
Further information on this vulnerability is available at : CVE-2023-1017
Affected Software
Windows 10 Version 1809 for x64-based SystemsWindows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 10 Version 20H2 for x64-based Systems
Windows 11 version 21H2 for x64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)