Intel Tdx Module vulnerabilities

CVE-2024-39283 [HIGH] CWE-791 CVE-2024-39283: Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.0 Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2026-20885 [HIGH] CWE-287 CVE-2026-20885: Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when at

CVE-2023-45745 [HIGH] CWE-20 CVE-2023-45745: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allo Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2023-47855 [MEDIUM] CWE-20 CVE-2023-47855: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allo Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2024-33607 [MEDIUM] CWE-125 CVE-2024-33607: Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow a Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2026-20705 [MEDIUM] CWE-922 CVE-2026-20705: Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform with Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are

CVE-2024-21801 [HIGH] CWE-691 CVE-2024-21801: Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.6 Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.

CVE-2026-20775 [MEDIUM] CWE-248 CVE-2026-20775: Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of s Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge an