Intel Tdx Module vulnerabilities
8 vulnerabilities
Known vulnerabilities in Intel Tdx Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2026-20885intel · tdx_moduleintel tdx_moduleImproper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.CVSS7.2HighEPSS0.15%RoutineCVE-2026-20775intel · tdx_moduleintel tdx_moduleUncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.CVSS6.8MediumEPSS0.13%RoutineCVE-2026-20705intel · tdx_moduleintel tdx_moduleInsecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.CVSS6.8MediumEPSS0.13%RoutineCVE-2024-33607intel · tdx_moduleintel tdx_moduleOut-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access.CVSS5.7MediumEPSS0.14%RoutineCVE-2024-39283intel · tdx_moduleintel tdx_moduleIncomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access.CVSS8.5HighEPSS0.18%RoutineCVE-2024-21801intel · tdx_moduleintel tdx_moduleInsufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.CVSS8.3HighEPSS0.18%RoutineCVE-2023-47855intel · tdx_module +3 moreintel tdx_moduleImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.CVSS6.7MediumEPSS0.37%RoutineCVE-2023-45745intel · tdx_module +4 moreintel tdx_moduleImproper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.CVSS8.2HighEPSS0.38%