Product:
Windows TPM
Summary
Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive information stored in the TPM. It is classified as having a medium severity level due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20829 |
Exploitation
To exploit this vulnerability, an attacker with local access must leverage the out-of-bounds read condition in the Windows TPM. By carefully crafting requests to the TPM, the attacker can retrieve sensitive information that should not be accessible, thereby compromising the confidentiality of the data stored.
Affected Products
- Windows TPM: Vulnerable to out-of-bounds read, allowing information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches provided by Microsoft. Regularly checking for updates and applying them promptly can help protect against potential exploitation of this vulnerability.