AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2025-31356

MEDIUM · CVSS 5.6 EPSS 0.07%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

Certain Intel Trust Domain Extensions (TDX) are vulnerable due to insufficient verification of data authenticity, which may allow information disclosure by a privileged user with local access. This vulnerability poses a medium risk to confidentiality, potentially leading to data exposure without user interaction, although it has minimal impact on integrity and no effect on availability. Organizations utilizing Intel TDX should prioritize remediation efforts to mitigate the risk of data breaches stemming from this vulnerability.

CVE
CVE-2025-31356
Severity
MEDIUM
CVSS
5.6
EPSS
0.07%

Original NVD Description

Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without any user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and no effect on availability. Subsequent system impacts include reduced confidentiality (low), integrity (low), and no effect on availability.