Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,249

Export CSV
CVE-2023-1018

TPM2.0 vulnerable to out-of-bounds read

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVSS 3.1 · 5.5 Medium EPSS 5.6% KEV · Not listed
Vendors
Microsoft Redhat Trustedcomputinggroup
Products
Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more
CVE-2023-1017

TPM2.0 vulnerable to out-of-bounds write

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Microsoft Redhat Trustedcomputinggroup
Products
Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more