Escalation of Privilege in Intel TDX Guest Software by Intel

CVE-2026-20763

What is CVE-2026-20763?

The vulnerability in Intel TDX Guest Software arises from an incorrect calculation within Ring 3 for user applications, potentially allowing escalation of privileges. An adversary with system software access can exploit this flaw through low-complexity local attacks that do not require user interaction. As a result, the vulnerability could jeopardize the system’s confidentiality, integrity, and availability, although its overall impact remains limited without special internal knowledge.

References