CVE-2026-20705
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Insecure storage of sensitive information in Intel TDX module for some Intel platforms (Ring 0) may allow information disclosure. A privileged attacker with a high complexity attack can access data via local access, without user interaction.
Risk Assessment
Risk of exposure of sensitive data, potentially compromising system confidentiality.
Recommendation
Update Intel TDX module to the latest version with security fixes.
Original NVD description (English source)
Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.