๐Ÿ” CVE Alert

CVE-2025-22885

MEDIUM 4.7
CVSS Score
4.7
EPSS Score
0.0%
EPSS Percentile
0th

Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CWE CWE-119
Vendor n/a
Product tdx module may allow an escalation of privilege. system software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. this result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. the potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Published Feb 10, 2026
Last Updated Feb 26, 2026
Stay Ahead of the Next One

Get instant alerts for n/a tdx module may allow an escalation of privilege. system software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. this result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. the potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Be the first to know when new medium vulnerabilities affecting n/a tdx module may allow an escalation of privilege. system software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. this result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. the potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None

Affected Versions

n/a / TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
See references

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
intel.com: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01314.html