CVE-2026-60059

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 40/100
Published: 2026-11-10 Modified: 2026-11-10 First seen: 2026-11-10 Status: active

Attack Surface

Adjacent Low Complexity No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: None
S: X
AT: None
VC: Low
VI: None
VA: None

Description

Use of uninitialized resource in the MigTD memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. Network adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Affected Software (1)

VendorProductVersion
n/a Intel(R) TDX Migration Trust Domain (MigTD) See references

Bug Bounty Relevance

40 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.8 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.16%
Raw Score 0.001580
Percentile 5.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00158
2026-11-12
0.00158

Intelligence Sources

mitre ref →
nvd ref →