Information Disclosure Vulnerability in Intel TDX Migration Trust Domain
CVE-2026-60059

4.8MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-60059?

A vulnerability exists in the Intel(R) TDX Migration Trust Domain (MigTD) that may allow attackers to exploit uninitialized resources in memory. This scenario could lead to unauthorized information disclosure by exploiting an adjacent access attack vector. The vulnerability can be triggered by a network adversary with privileged user capabilities, requiring low complexity to execute. Notably, this attack does not necessitate user interaction, posing risks to system confidentiality. Although the integrity and availability of the system remain unaffected, the exploitation of this vulnerability can compromise sensitive data, highlighting the importance of securing environments utilizing Intel's TDX technology.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.