Microsoft Windows TPM Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows Trusted Platform Module (TPM). This issue allows an authorized attacker to locally disclose information. The vulnerability affects multiple Windows products, including Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, Windows Server 2025, and various Windows 11 and Windows Server 2022 editions for ARM64-based systems.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing access to secrets or privileged information belonging to the user of the affected application.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073724, KB5073457, KB5073379, and KB5074109.