CRITICALCVSS v4 9.3Vulnerability

CVE-2026-44685

Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.

Properties

First seen
2026-11-10T18:31:51+00:00
Cvss score
9.3
Last seen
2026-11-10T18:31:51+00:00
Euvd assigner
intel
Retrieved at
2026-11-10T23:34:23+00:00
Src batch id
euvd-20261110T193402Z-263c5d
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121664
Score
9.3
Euvd base score version
4.0
Fetched at
2026-11-10T19:34:21+00:00
Cvss vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
First seen by Signal
2026-11-10T19:28:56+00:00
Euvd base score
9.3
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Content hash
a1204cc8dc7f0151bff11c20c679789544b7689142f53984910398577d8abaec
Published at
2026-11-10T18:17:40.273
Euvd updated
2026-11-10T18:31:51+00:00
Last modified
2026-11-10T22:06:57.400
Euvd epss pct
0
Severity
CRITICAL

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-44685 (CVSS v4 9.3) — Ninja Signal Threat Intelligence | Ninja Signal