CVE-2026-62920
Quick assessment
Affected
n/a Intel(R) TDX Migration Trust Domain (MigTD)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Intel(R) TDX 迁移信任域（MigTD）的 Ring 0 环境中，MigTD 错误处理机制存在未检查返回值的问题：这可能导致虚拟化层（Hypervisor）遭受拒绝服务攻击。具备特权用户权限的系统软件攻击者，结合低复杂度的攻击手段，即可触发拒绝服务。该漏洞可在无特殊内部知识、无需用户交互的情况下，通过本地访问利用（前提是满足攻击所需条件）。此潜在漏洞可能影响系统的保密性（无影响）、完整性（无影响）和可用性（高影响），进而导致系统后续在保密性（无影响）、完整性（无影响）和可用性（无影响）方面不再产生额外
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Intel(R) TDX Migration Trust Domain (MigTD) | See references |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-62920
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unchecked return value in the MigTD error handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Intel(R) TDX Migration Trust Domain (MigTD) | See references | - |
|
II. Public POCs for CVE-2026-62920
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-62920
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-62920 (1)
Same Patch Batch · n/a · 2026-11-10 · 103 CVEs total
| CVE-2026-61887 | 9.4 CRITICAL | Intel TDX MigTD SPDM 重绑定认证漏洞 |
| CVE-2026-44685 | 9.3 CRITICAL | Intel TDX 迁移协议认证绕过漏洞 |
| CVE-2026-61473 | 9.2 CRITICAL | Intel TDX MigTD 身份验证绕过导致提权 |
| CVE-2026-57892 | 8.8 HIGH | Intel TDX MigTD v2 访问控制缺陷致提权漏洞 |
| CVE-2026-57882 | 8.7 HIGH | Intel D50DNP/M50FCP UEFI XmlCliCommonDxe 越界写漏洞 |
| CVE-2026-57890 | 8.7 HIGH | Intel TDX MigTD 0日信息泄露漏洞 |
| CVE-2026-57891 | 8.7 HIGH | Intel 服务器 UEFI XmlCliCommonDxe 越界写提权漏洞 |
| CVE-2026-56435 | 8.7 HIGH | Intel 服务器 D50DNP/M50FCP UEFI 越界写提权漏洞 |
| CVE-2026-41221 | 8.6 HIGH | Intel Slim Bootloader UEFI 固件整数溢出导致提权 |
| CVE-2026-41224 | 8.6 HIGH | Intel Slim Bootloader UEFI 越界写导致提权 |
| CVE-2026-35500 | 8.6 HIGH | Intel Slim Bootloader UEFI 栈缓冲区溢出漏洞 |
| CVE-2026-40433 | 8.5 HIGH | Intel PROSet 无线软件堆栈缓冲区溢出致拒绝服务 |
| CVE-2026-34016 | 8.5 HIGH | Intel VTune 2026.0.0 前版本竞态条件提权漏洞 |
| CVE-2026-32670 | 8.5 HIGH | Intel VTune Profiler Ring 1 竞态条件提权漏洞 |
| CVE-2026-32667 | 8.5 HIGH | Intel VTune Profiler 越界写入提权漏洞 |
| CVE-2026-60138 | 8.4 HIGH | Intel TDX MigTD virtio-vsock 越界指针提权漏洞 |
| CVE-2026-62929 | 8.4 HIGH | Intel TDX MigTD virtio-vsock 越界指针解引用漏洞 |
| CVE-2026-60142 | 8.4 HIGH | Intel TDX MigTD 存在任意写漏洞，可提权并泄露信息。 |
| CVE-2026-50175 | 8.4 HIGH | Intel Slim Bootloader 存在本地提权漏洞 |
| CVE-2026-50109 | 8.3 HIGH | Intel PCM 越界写漏洞导致拒绝服务 |
Showing top 20 of 103 CVEs. View all on vendor page → →