Escalation of Privilege and Information Disclosure in Intel TDX Migration Trust Domain
CVE-2026-61887

9.4CRITICAL

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-61887?

A critical vulnerability has emerged in the TDX Migration Trust Domain, where insufficient authentication implementation allows for potential escalation of privileges and exposure of sensitive information. This vulnerability can be exploited by a network adversary using low-complexity attacks without requiring user interaction. When adjacent access is available, it can lead to unauthorized remote code execution, significantly compromising the confidentiality, integrity, and availability of affected systems. Protective measures and software updates are essential to mitigate potential risks associated with this exposure.

Affected Version(s)

Intel(R) TDX Migration Trust Domain (MigTD) See references

References

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.