Threats tagged 'ghsa-gfv3-g39j-jhvc'

CVE-2026-61887 is a critical vulnerability in the MigTD SPDM rebind implementation for Intel(R) TDX Migration Trust Domain within Ring 0. It involves a missing critical authentication step that may allow a hypervisor to escalate privileges and disclose information. An unauthenticated network adversary with low attack complexity could potentially achieve remote code execution via adjacent access without user interaction or special internal knowledge. The vulnerability impacts confidentiality, integrity, and availability at high levels.