CVE-2026-61470

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 56/100
Published: 2026-11-10 Modified: 2026-11-12 First seen: 2026-11-10 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: None
VI: Low
VA: Low

Description

Improper control of a resource through its lifetime in the MigTD's TLS client for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Affected Software (1)

VendorProductVersion
n/a Intel(R) TDX Migration Trust Domain (MigTD) See references

Bug Bounty Relevance

56 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.17%
Raw Score 0.001720
Percentile 6.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00172
2026-11-12
0.00172

Intelligence Sources

mitre ref →
nvd ref →