CVE-2026-62929

Expired pointer dereference in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. System software adversary with a privileged user combined with a low complexity attack...

CVE-2026-62275

Detection of error condition without action in the MigTD's vmcallraw transport for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data...

CVE-2026-61887

Missing critical step in authentication in the MigTD SPDM rebind implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an unauthenticated user combined with a low complexity...

CVE-2026-61473

Authentication bypass by capture-replay in the MigTD for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2026-61467

Use after free in the MigTD virtio driver for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially...

CVE-2026-60142

Write-what-where condition in the MigTD for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...

CVE-2026-60138

Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalatio...

CVE-2026-57893

Incomplete internal state distinction in the MigTD's SPDM responder for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. Th...

CVE-2026-57892

Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a high complexity attack may enable...

CVE-2026-57891

Out-of-bounds write in the XmlCliCommonDxe for the IntelR Server Board D50DNP and IntelR Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This resul...

CVE-2026-57882

Out-of-bounds write in the XmlCliCommonDxe for the IntelR Server Board D50DNP and IntelR Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This...

CVE-2026-56759

Improper input validation in the MigTD PCI BAR handling for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result ma...

CVE-2026-56440

Improper input validation for some BigDL before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

CVE-2026-56435

Out-of-bounds write in the XmlCliCommonDxe for the IntelR Server Board D50DNP and IntelR Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This...

CVE-2026-56432

Unintended proxy or intermediary 'confused deputy' in the MigTD signing for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...

CVE-2026-52899

Deserialization of untrusted data for some BigDL software before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This resul...

CVE-2026-50175

Untrusted pointer dereference in the FirmwareWakingVector for the IntelR Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-44685

Authentication bypass by spoofing in the MigTD rebinding protocol for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution...

CVE-2026-44606

Out-of-bounds write for some IntelR Intelligent Storage Acceleration Library within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-41224

Out-of-bounds write in the UEFI firmware for the IntelR Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may...