Intel Tdx Module vulnerabilities

8 CVEs affecting Intel Tdx Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20885, published 2026-08-11.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-45745, published 2024-05-16. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2023-47855, published 2024-05-16. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2024-21801, published 2024-08-14. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.
• CVE-2024-39283, published 2024-08-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local…
• CVE-2026-20885, published 2026-08-11. High severity, CVSS 7.2. EPSS: 0.1% chance of exploitation in the next 30 days. Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary…
• CVE-2024-33607, published 2025-08-12. Medium severity, CVSS 5.6. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2026-20705, published 2026-08-11. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a…
• CVE-2026-20775, published 2026-08-11. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may…