CVE-2025-49658

Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally...

CVE-2025-49659

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

CVE-2025-49658

Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally...

CVE-2025-49659

Technical details for CVE-2025-49659 are not present in the provided connected documents. Public information about affected products, root cause, exploit status, and fixes is not available here; monitor for updates from official advisories.

CVE-2025-49658

CVE-2025-49658 is an information-disclosure vulnerability in Windows that arises from an out-of-bounds read in the TDX.sys driver. Impact: an authenticated, local attacker with LOW privileges could disclose sensitive data (C: HIGH, I: NONE, A: NONE; CVSS 5.5/LOCAL). Affected component: Windows Tr...

PT-2025-28558 · Microsoft · Windows Tdx.Sys +1

Name of the Vulnerable Software and Affected Versions: Windows TDX.sys affected versions not specified Description: A buffer over-read issue in Windows TDX.sys allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer versio...

PT-2025-28557 · Microsoft · Tdx.Sys +1

Name of the Vulnerable Software and Affected Versions: Windows TDX.sys affected versions not specified Description: The issue is related to an out-of-bounds read in Windows TDX.sys, which allows an authorized attacker to disclose information locally. This means that an attacker with certain...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows TDX.sys. The following products and editions are affected: Windows 10 Version 21H1 for ARM64-based Systems,Windows 10...

CVE-2017-0296

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory...

Microsoft Windows TDX Elevation of Privilege Vulnerability (KB4021923)

This host is missing an important security update according to Microsoft KB4021923 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Windows 2008 June 2017 Multiple Security Updates

The remote Windows host is missing multiple security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited the vulnerability...

KB4022727: Windows 10 Version 1507 June 2017 Cumulative Update

The remote Windows 10 version 1507 host is missing security update KB4022727. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Hyper-V instruction emulation due to a failure to properly enforce privilege levels. An attacker on a...

KB4022715: Windows 10 Version 1607 and Windows Server 2016 June 2017 Cumulative Update

The remote Windows host is missing security update KB4022715. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist in Device Guard. A local attacker can exploit these, via a specially crafted script, to bypass the Device Guard Code Integrity...

Cumulative update for Windows 10: November 10, 2015

None None...

Cumulative update for Windows 10 Version 1511: November 10, 2015

None None...