Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-27940

Опубликовано: 10 фев. 2026
Источник: nvd
CVSS3: 4.1
EPSS Низкий

Описание

Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Software side channel adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

EPSS

Процентиль: 1%
0.00098
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.1
github
5 месяцев назад

Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Software side channel adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS3: 4.1
fstec
5 месяцев назад

Уязвимость модуля Intel Trust Domain Extensions(TDX) микропрограммного обеспечения процессоров Intel, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

EPSS

Процентиль: 1%
0.00098
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-125