CVE-2017-0296: High severity windows 10 vulnerability
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows TDX Elevation of Privilege Vulnerability".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0296?
CVE-2017-0296 has a critical severity rating as it allows an attacker to elevate privileges.
How do I fix CVE-2017-0296?
To fix CVE-2017-0296, users should apply the latest security updates provided by Microsoft for their affected Windows systems.
Which systems are affected by CVE-2017-0296?
CVE-2017-0296 affects multiple Microsoft Windows versions including Windows 7 SP1, Windows 8.1, Windows 10, and Windows Server versions.
What type of vulnerability is CVE-2017-0296?
CVE-2017-0296 is a privilege escalation vulnerability caused by improper handling of buffer lengths in the tdx.sys system driver.
Can CVE-2017-0296 be exploited remotely?
CVE-2017-0296 requires local access to the system to exploit, so it cannot be directly exploited remotely.