CVE-2023-36717 is a Denial of Service vulnerability affecting the Windows Virtual Trusted Platform Module (vTPM) across various versions of Windows 10, 11, and Windows Server. With a CVSS score of 6.5 (Medium), this vulnerability can be exploited locally with low attack complexity, potentially leading to a denial of service condition for the affected system. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing. While community discussion and media coverage are minimal, Microsoft has released a patch for this flaw.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.0.10240.20232CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:* | ||
< 10.0.14393.6351CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* | ||
< 10.0.17763.4974CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* | ||
< 10.0.19041.3570CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:* | ||
< 10.0.19045.3570CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.