CVE-2025-22889

CVE-2025-22889 affects Intel Xeon 6 processors with Intel TDX. The root cause is improper handling of overlap between protected memory ranges, which may allow a privileged user to escalate privileges via local access. Publicly documented mitigations involve microcode updates (e.g., intel-microcod...

CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22853

Intel TDX firmware contains an improper synchronization issue that can allow a privileged user with local access to escalate privileges (CVE-2025-22853). The issue is documented in the Intel advisory INTEL-SA-01312 and is associated with Intel(R) TDX firmware and related processors. According to ...

CVE-2025-20613

Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

Most security tools can’t see what happens inside the browser, but that’s where the majority of work, and risk, now lives. Security leaders deciding how to close that gap often face a choice: deploy a dedicated Enterprise Browser or add an enterprise-grade control layer to the browsers employees...

The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

Most security tools can't see what happens inside the browser, but that's where the majority of work, and risk, now lives. Security leaders deciding how to close that gap often face a choice: deploy a dedicated Enterprise Browser or add an enterprise-grade control layer to the browsers employees...

Intel TDX Module firmware security vulnerabilities

Intel TDX Module firmware is a firmware from Intel Corporation USA. A security vulnerability exists in Intel TDX Module firmware versions prior to 1.5.13, which stems from improper locking and may result in elevated privileges...

Fedora 41 : chromium (2025-81d05a9171)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-81d05a9171 advisory. Updated to 139.0.7258.66 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2025-8579: Inappropriate implementati...

PT-2025-32756 · Intel · Intel Sgx Sdk +1

Name of the Vulnerable Software and Affected Versions: Intel Edger8r Tool for some IntelR SGX SDK affected versions not specified Description: Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially escalate privileges via local...

PT-2025-32718 · Intel · Intel Tdx

Name of the Vulnerable Software and Affected Versions: IntelR TDX affected versions not specified Description: An improper synchronization issue exists within the firmware of certain IntelR TDX implementations. A user with privileged access may be able to escalate their privileges through local...

PT-2025-32691 · Intel · Intel Tdx

Name of the Vulnerable Software and Affected Versions: IntelR TDX module software versions prior to TDX 1.5.07.00.774 Description: An out-of-bounds read issue exists in some IntelR TDX module software. This may allow an authenticated user to potentially enable information disclosure via local...

PT-2025-32697

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Processor firmware with SGX enabled affected versions not specified Description: Improper buffer restrictions in some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially escalate privileges...

PT-2025-32757

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Processors affected versions not specified Description: An improperly implemented security check for standard in the DDRIO configuration may allow a privileged user to potentially enable escalation of privilege via local access...

Linux Distros Unpatched Vulnerability : CVE-2025-37908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab-objexts always When memory allocation profiling is disabled at runti...

Intel® Xeon® 6 Processor with Intel® TDX Advisory

Summary: A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22889 Description:...

2025.2 IPU - Intel® TDX Module Advisory

Summary: A potential security vulnerability in Intel® Trust Domain Extensions TDX Module may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20044 Description: Improper locking for some Intel® TDX...

Intel® Software Guard Extensions SDK (Intel® SGX SDK) Edger8r Tool Advisory

Summary: A potential security vulnerability in the Intel Edger8r Tool for the Intel® Software Guard Extensions SDK Intel® SGX SDK may allow escalation of privilege. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-32004...