Privilege Escalation in Intel TDX Migration Trust Domain by Intel
CVE-2026-60142

8.4HIGH

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-60142?

A write-what-where condition has been identified in the Intel TDX Migration Trust Domain (MigTD), which operates at Ring 0 within the hypervisor environment. This vulnerability permits a potential information disclosure and could lead to unauthorized privilege escalation by adversaries with privileged access. Attackers with local access and low complexity could exploit this weakness without needing user interaction or special internal knowledge. The implications of this vulnerability are significant, impacting the confidentiality, integrity, and availability of affected systems.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.