PT-2026-7294 · Intel · Trust Domain Extensions

CVE-2025-27572 · Publicado 2026-02-10 · Atualizado 2026-02-11

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Média

Vetor base

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27572

Description A hypervisor may allow information disclosure during transient execution for some Trust Domain Extensions (TDX) within Ring 0. An authorized adversary with privileged user access and a high complexity attack may expose sensitive data. This potential issue may occur via local access without requiring special internal knowledge or user interaction. The vulnerability may impact the confidentiality of the vulnerable system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-1420

CWE-670

Identificadores relacionados

BDU:2026-03185

CVE-2025-27572

Produtos afetados

Trust Domain Extensions

Referências · 5

• https://twitter.com/CVEnew/status/2021279083213062305 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-03185 · Nota de Segurança
• https://t.me/true_secator/7898 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-27572 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01397.html · Nota