EUVD-2026-56505
GHSA-9cwm-qgv5-93vq
Severity by source
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only attack requiring Ring-0 privileges and high complexity; scope changes because TDX Trust Domain isolation boundary is crossed; no availability impact per description.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
2DescriptionCVE.org
Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
AnalysisAI
Improper authentication (CWE-287) in Intel's Trust Domain Extensions (TDX) module allows a Ring-0 system software adversary with high privileges to breach Trust Domain isolation boundaries, enabling information disclosure and privilege escalation. Affects select Intel platforms running TDX with a high-complexity, locally-executed attack path - no user interaction required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) the target system must be an Intel platform with TDX support enabled in firmware/BIOS; (2) the attacker must already have Ring-0 (system software / hypervisor-level) privilege - PR:H in CVSS 4.0 confirms this; (3) a high-complexity attack sequence must be constructed (AC:H), meaning straightforward or scripted exploitation is unlikely; (4) platform-specific attack requirements must be present (AT:P), suggesting this does not affect all TDX platforms universally. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.0 reflects a genuine but constrained risk profile: AV:L limits the attack to local system access, PR:H requires the adversary to already operate at Ring 0 (hypervisor or equivalent), and AC:H demands a sophisticated, high-complexity exploitation chain. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply the updated Intel TDX Module (firmware/microcode update) identified in Intel Security Advisory INTEL-SA-01436 at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01436.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running Intel TDX and document deployment context including hypervisor platform and workload sensitivity classification. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-287 – Improper Authentication
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today