Microsoft Windows TDX.sys Privilege Escalation Vulnerability

A buffer over-read vulnerability has been identified in the Windows Transport Driver Interface (TDI) translation driver, TDX.sys. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from a buffer over-read, which can be exploited to gain higher-level permissions on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the November 2025 security update rollup. Instructions for downloading this update are available on the Microsoft Update Catalog.