CVE-2026-20765
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Incorrect comparison in Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (low).
Risk Assessment
Escalation of privilege may allow an attacker to gain additional privileges, potentially leading to security breaches. System privileges are required, but the risk is moderate.
Recommendation
It is recommended to update Intel TDX Guest software to version 0.3.1 or later. Also, restrict access to systems with administrator privileges.
Original NVD description (English source)
Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.