Incorrect calculation in Intel Trust Domain Extensions (TDX) module - CVE-2026-20763

 

Incorrect calculation in Intel Trust Domain Extensions (TDX) module - CVE-2026-20763

Published: August 19, 2026


Vulnerability identifier: #VU144247
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-20763
CWE-ID: CWE-682
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local administrator to escalate privileges on the system.

The vulnerability exists due to incorrect calculation, which leads to security restrictions bypass and privilege escalation.


Affected software

Intel Trust Domain Extensions (TDX) module

How to mitigate CVE-2026-20763

Install updates from vendor's website.

Intel Trust Domain Extensions (TDX) module - update to 0.3.1

External References

Related Security Bulletins