1. Home
  2. CVE Database
  3. CVE-2026-20885
HIGH · 7.2

CVE-2026-20885

Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary wi...

Vulnerability Description

Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
IntelTdx Module<= 1.5.28
IntelXeon Bronze 3408U-
IntelXeon Gold 5411N-
IntelXeon Gold 5412U-
IntelXeon Gold 5415-
IntelXeon Gold 5416S-
IntelXeon Gold 5418N-
IntelXeon Gold 5418Y-
IntelXeon Gold 5420-
IntelXeon Gold 6414U-
IntelXeon Gold 6416H-
IntelXeon Gold 6418H-
IntelXeon Gold 6421N-
IntelXeon Gold 6426Y-
IntelXeon Gold 6428N-
IntelXeon Gold 6430-
IntelXeon Gold 6434-
IntelXeon Gold 6434H-
IntelXeon Gold 6438M-
IntelXeon Gold 6438N-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2026-20885?

CVE-2026-20885 is a vulnerability with a CVSS score of 7.2 (HIGH). Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary wi...

How severe is CVE-2026-20885?

CVE-2026-20885 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-20885?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Tdx Module, Intel Xeon Bronze 3408U, Intel Xeon Gold 5411N, Intel Xeon Gold 5412U, Intel Xeon Gold 5415.