TCG TPM2.0 implementations vulnerable to memory corruption

Re:TCG TPM2.0 implementations vulnerable to memory corruption by WirelessGigabit on Tuesday February 28, 2023 @04:31PM (#34975132)

Hard to gage whether on Windows one has access to these APIs without being an Administrator.

[ Parent | on HN ]

Re:TCG TPM2.0 implementations vulnerable to memory corruption by Cyph0n on Tuesday February 28, 2023 @05:15PM (#34975682)

I’m a total security noob, but I’d wager that privilege escalation is a piece of cake relative to key extraction from a TPM.

[ Parent | on HN ]

Re:TCG TPM2.0 implementations vulnerable to memory corruption by AstralStorm on Thursday March 02, 2023 @05:41AM (#34994240)

Not on fully secured Windows with Device Guard, Credential Guard, HVCI and mitigations on it is not.

The defaults are lax garbage though.

[ Parent | on HN ]

Re:TCG TPM2.0 implementations vulnerable to memory corruption by gerdesj on Tuesday February 28, 2023 @07:38PM (#34977150)

The article says "authenticated user".

[ Parent | on HN ]