MSRC-CVE-2023-36717 — Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.

Security updates
10.0.17763.4974 — https://support.microsoft.com/help/5031361
10.0.20348.2031 — https://support.microsoft.com/help/5031364
10.0.22000.2538 — https://support.microsoft.com/help/5031358
10.0.19041.3570 — https://support.microsoft.com/help/5031356
10.0.22621.2428 — https://support.microsoft.com/help/5031354
10.0.10240.20232 — https://support.microsoft.com/help/5031377
10.0.14393.6351 — https://support.microsoft.com/help/5031362

Vulnerabilities 1

Medium 6.5

CVE-2023-36717

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 10, 2023

Revision history

2023-10-10 #1
Information published.

References

CVE-2023-36717 Windows Virtual Trusted Platform Module Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36717
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss