Andrey Markovytch

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** An improper access control issue exists in Windows Hyper-V. This allows a local attacker who is already authorized to disclose information. The issue can lead to the compromise of sensitive information and potentially impact system functionality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Virtualization-Based Security (VBS) Enclave (affected versions not specified) **Description** A heap-based buffer overflow exists within the Windows Virtualization-Based Security (VBS) Enclave component. This condition allows a locally authorized attacker to gain elevated privileges on the system. The issue involves a flaw that can be exploited to affect system security. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel(R) TDX module software versions prior to 1.5.05.46.698 **Description** The issue is related to improper input validation in the Intel(R) TDX module software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could lead to a potential system compromise. **Recommendations** For versions prior to 1.5.05.46.698, upgrade the affected component to mitigate the risk. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel TDX versions prior to 1.5.05.46.698 **Description** The issue is related to improper input validation in some Intel TDX module software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could permit an attacker to increase their privileges. **Recommendations** For versions prior to 1.5.05.46.698, update to version 1.5.05.46.698 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.