Intel TDX MigTD CVE-2026-60059

Exploitation requires the attacker to hold HIGH privileges (PR:H) AND adjacent network access (AV:A) to the Intel TDX Migration Trust Domain (MigTD) component - per the description, a 'Network adversary with a privileged user' operating at or near the hypervisor Ring 0 context. No user interaction is required (UI:N) and attack complexity is low (AC:L). The specific product feature or trigger path for reading the uninitialized MigTD memory is not described in the available sources beyond the Intel advisory reference. Limiting factors that materially reduce real-world risk: the attacker must already possess privileged access and an adjacent position, the system must be an Intel TDX deployment using MigTD for Trust Domain migration, and the outcome is confined to low-impact confidentiality disclosure with no integrity or availability consequences.

This is a low-to-moderate real-world priority, not an emergency. The CVSS 4.0 base score is 4.8 (Medium), driven by adjacent attack vector (AV:A), low complexity (AC:L), but critically requiring HIGH privileges (PR:H) and yielding only LOW confidentiality impact (VC:L) with no integrity or availability impact. Exploitation status: no public exploit identified at time of analysis - the input shows no KEV listing and no PoC/exploit reference. No EPSS score was provided, so statistical exploitation probability cannot be weighed. The vuln.today decision label is 'this_month', consistent with a Medium-severity issue that warrants patching on a normal cadence rather than act_now/emergency handling. The signals are internally consistent: a high-privilege, adjacent-access information leak of limited scope is a hardening/defense-in-depth concern for confidential-computing environments rather than a widely-weaponizable flaw. One note of caution: the description's phrase 'Network adversary with a privileged user' combined with AV:A (adjacent) and PR:H is somewhat unusual - the attacker must already hold privileged access AND adjacent network position, which substantially narrows the realistic threat population; verify the exact trust-boundary assumptions with Intel SA-01580.

An attacker who already holds privileged access within an adjacent position to the Intel TDX Migration Trust Domain (e.g., a malicious or compromised hypervisor-level actor) triggers a read of uninitialized MigTD memory and recovers residual sensitive data from that memory region. The impact is limited to low-severity confidentiality disclosure with no integrity or availability effect. No public exploit code is identified at time of analysis, and exploitation requires both high privileges and adjacent access.