CVE-2025-22885

CVE-2025-22885 concerns firmware for the TDX Module with an improper buffer restriction that may enable privilege escalation. The issue is exploitable locally by a system software adversary who already has privileged user access, under high attack complexity and with no user interaction required....

PT-2026-7301

Name of the Vulnerable Software and Affected Versions TDX Module versions prior to tdx1.5 Description A race condition exists within the hypervisor in Ring 0 for some TDX Module versions prior to tdx1.5, potentially leading to a denial of service. An authorized adversary with privileged user...

CVE-2025-30513: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements...

CVE-2025-22885: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack...

CVE-2025-32467: Use of Uninitialized Variable

Use of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access wh...

CVE-2025-27940: Out-of-bounds Read

Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Software side channel adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access wh...

CVE-2025-31944: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack...

CVE-2024-39283

Incomplete filtering of special elements in IntelR TDX module software before version TDX1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access...

HPESBCR04980 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01312, Intel TDX Module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to v2.06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20613 |...

EUVD-2024-19413

Malicious code in bioql PyPI...

EUVD-2023-50034

Malicious code in bioql PyPI...

EUVD-2024-37884

Malicious code in bioql PyPI...

EUVD-2024-24655

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-47855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of...

CVE-2024-33607

Out-of-bounds read in some IntelR TDX module software before version TDX1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20044: Improper Locking

Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel TDX Module software 缓冲区错误漏洞

Intel TDX Module software is a collection of software modules from Intel Corporation USA. A buffer error vulnerability exists in versions of Intel TDX module software prior to TDX1.5.07.00.774, which originates from an out-of-bounds read and could lead to information disclosure...

PT-2025-32862 · Intel · Intel Tdx Module

Name of the Vulnerable Software and Affected Versions: IntelR TDX Module firmware versions prior to 1.5.13 Description: Improper locking in some IntelR TDX Module firmware versions may allow a privileged user to potentially escalate privileges via local access. Recommendations: Update to IntelR T...

HPESBHF04913 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.5004-22-2025 HPE Alletra 4120 - Prior to 2.5004-22-2025 HPE Alletra 4140 - Prior to 2.5004-22-2025 HPE ProLiant DL110 Gen11 - Prior to...

CVE-2024-27457

Improper check for unusual or exceptional conditions in IntelR TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access...