CVE-2025-60720CWE-126

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

⚡ A buffer over-read lurking in Windows TDX.sys could let an authorized attacker grab higher privileges than they’re supposed to have! Think of it like a restaurant where a sneaky patron peeks into the chef's secret recipe book—once they see it, they can whip up any dish without ever being trained! An attacker could leverage this vulnerability to escalate their privileges locally, potentially gaining access to sensitive data or the ability to execute unauthorized commands. This isn't just a minor glitch; it could lead to devastating breaches of trust and security within your systems!

Put simply

Think of it like a restaurant where a sneaky patron peeks into the chef's secret recipe book—once they see it, they can whip up any dish without ever being trained! The buffer over-read in Windows TDX.sys allows an attacker with local access to read portions of memory they shouldn’t be able to—think of it as reading someone else's private notes at a table without their permission!

What to do

An attacker could leverage this vulnerability to escalate their privileges locally, potentially gaining access to sensitive data or the ability to execute unauthorized commands. This isn't just a minor glitch; it could lead to devastating breaches of trust and security within your systems! To remediate this vulnerability, ensure you apply the latest security patches provided by Microsoft as soon as they are available. Additionally, monitor your systems for any unauthorized access attempts and review user privileges regularly to minimize risks. You've got this! Following these steps will help keep your environment secure and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00430 · 36.2th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2025-11-11T17:59Z
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
    cvelistv5