PT-2026-7294 · Intel · Trust Domain Extensions

Published 2026-02-10 · Updated 2026-02-11 · CVE-2025-27572

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27572

Description A hypervisor may allow information disclosure during transient execution for some Trust Domain Extensions (TDX) within Ring 0. An authorized adversary with privileged user access and a high complexity attack may expose sensitive data. This potential issue may occur via local access without requiring special internal knowledge or user interaction. The vulnerability may impact the confidentiality of the vulnerable system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1420

CWE-670

Related Identifiers

BDU:2026-03185

CVE-2025-27572

Affected Products

Trust Domain Extensions

References · 5

• https://bdu.fstec.ru/vul/2026-03185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27572 · Security Note
• https://twitter.com/CVEnew/status/2021279083213062305 · Twitter Post
• https://t.me/true_secator/7898 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01397.html · Note