Microsoft Windows Virtual Trusted Platform Module Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Windows Virtual Trusted Platform Module. This issue affects multiple versions of Windows 10 and Windows 11, as well as Windows Server 2016. The vulnerability arises from improper input validation, which can be exploited to disrupt the availability of the Virtual Trusted Platform Module services.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the Virtual Trusted Platform Module services to become unavailable.

Remediation

Users can apply the security update KB5049981 for Windows 10 and KB5050021 for Windows 11. For Windows Server 2016, the security update is KB5049993. These updates can be downloaded via the Microsoft Update Catalog.