Intel TDX MigTD: Sensitive data not cleared before reuse enables information disclosure
Summary
The MigTD component of Intel TDX does not clear sensitive data from a resource before the resource is reused. An attacker with local access and high privileges, such as a privileged user or system software, combined with high attack complexity, may be able to read confidential data. The CVSS 4.0 vector shows high confidentiality impact and no integrity or availability impact. Relevance is limited to environments that use Intel TDX with MigTD, and the CVE record is still awaiting NVD analysis.
Affected
- Intel TDX Migration Trust Domain (MigTD), per the CVE record: See references.
- Exact affected versions: Unknown. See Intel advisory INTEL-SA-01580.
Fixed in
Unknown. Check Intel advisory INTEL-SA-01580 for reference software updates and microcode or firmware updates.
Workaround
Unknown. No vendor-confirmed workaround found. Limit privileged access on TDX hosts to trusted administrators.
Exploitation
- No evidence of exploitation in the wild found.
- No public proof of concept found.
- CISA KEV catalog not checked.
Our recommendation
- Check whether any server uses Intel TDX with MigTD.
- Ask your hardware or cloud provider for the MigTD patch status.
- Apply Intel's microcode and firmware updates once available, after checking INTEL-SA-01580.
- Restrict privileged access to TDX hosts and monitor administrative activity.
- Systems without Intel TDX are not affected.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Intel Security Advisory INTEL-SA-01580 intel.com
- Strix: CVE-2026-61377 www.strix.ai
- OffSeq Radar: CVE-2026-61377 radar.offseq.com
- OffSeq Radar: Sensitive information uncleared in MigTD radar.offseq.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 10:45.
Original description (NVD)
Sensitive information uncleared in resource before release for reuse in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.