CVE-2026-20763

Analyzed Analyzed - Analysis Complete

Privilege Escalation in Intel TDX Guest Software

Publication date: 2026-08-11

Last updated on: 2026-08-18

Assigner: Intel Corporation

Description

Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-18

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20763

EUVD

EUVD-2026-56490

Affected Vendors & Products

Vendor	Product	Version / Range
intel	trust_domain_extensions_guest	to 0.3.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-682	The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Attack-Flow Graph

Executive Summary

This is a privilege escalation vulnerability in Intel TDX Guest software before version 0.3.1. It allows a privileged user to exploit incorrect calculations to gain higher system privileges. The attack requires local access but has low complexity and no special internal knowledge or user interaction.

Detection Guidance

This vulnerability requires checking the Intel TDX Guest software version. No specific detection commands are provided in the available context. Verify the installed version against the patched version 0.3.1 or later.

Impact Analysis

An attacker could exploit this to gain elevated privileges on your system, potentially allowing them to read or modify sensitive data, disrupt services, or take control of the system. The impact includes low confidentiality, integrity, and availability risks.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality and integrity requirements in GDPR and HIPAA. Compliance may be impacted if sensitive data is exposed or altered due to the privilege escalation.

Mitigation Strategies

Update Intel TDX Guest software to version 0.3.1 or later to address the incorrect calculation vulnerability. Ensure system software is patched and restrict privileged user access to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-20763. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70