CVE-2023-47855

CVE-2023-47855 involves improper input validation in some Intel(R) TDX module software prior to 1.5.05.46.698, potentially enabling privilege escalation for a local attacker. The vulnerability is cited across multiple advisories (Intel security advisory, vendor/Tencent/Tenable notes) and is tied ...

CVE-2023-45745

CVE-2023-45745 (Intel TDX module) - details from connected Intel advisory : The issue is an improper input validation in Intel® Trust Domain Extensions (TDX) module software before version 1.5.05.46.698, which may allow a privileged local user to escalate privileges. Affected product: Intel TDX m...

CVE-2026-20885

CVE-2026-20885 concerns the Intel(R) TDX module on certain Intel platforms, where improper authentication in the Ring 0 Trust Domain can enable information disclosure and privilege escalation. The NVD/CVE records describe a local-attack scenario requiring a privileged user, with high attack compl...

CVE-2024-39283

Intel TDX module software prior to version TDx 1.5.01.00.592 is affected by incomplete filtering of special elements, potentially allowing an authenticated user to escalate privileges via local access. Affected product: Intel® TDX module software before TDx 1.5.01.00.592. Root cause: incomplete f...

CVE-2024-21801

CVE-2024-21801 affects Intel® TDX module software prior to version 1.5.05.46.698. The issue is described as insufficient control flow management in the TDX module software, which may allow a privileged local attacker to cause a denial of service. Affected products are Intel® TDX module software v...

CVE-2026-20705

CVE-2026-20705 describes insecure storage of sensitive information in the Intel(R) TDX module for Intel platform Ring 0 Trust Domain. The issue allows potential data exposure via local access by a system software adversary with a privileged user and high attack complexity, requiring no user inter...

CVE-2026-20775

The CVE-2026-20775 entry describes an issue where an uncaught exception in some Intel(R) TDX modules within Ring 0: Trust Domain can lead to a denial of service. The impact is limited to availability (high) with no confidentiality or integrity impact, and is characterized by a local attack with a...

CVE-2024-33607

CVE-2024-33607 describes an out-of-bounds read in some Intel® TDX module software prior to version 1.5.07.00.774, which may allow an authenticated user to disclose information via local access. Affected software is Intel® TDX module software before 1.5.07.00.774. The vulnerability has local attac...