CVE Watch10 de nov. de 2026

CVE-2026-49036

Time-of-check time-of-use race condition in the MigTD shared memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hyper

CVSS

—

Sem CVSS

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-367

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Time-of-check time-of-use race condition in the MigTD shared memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Referências oficiais

intel.comhttps://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-500793.3 BAI

—

——0Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the guest to manipulate the virtual network device causing a crash of the QVM.2h CVE-2026-882167.5 ALT

—

——0Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.3h CVE-2026-1224745.9 MÉD

—

——0Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.3h CVE-2026-1199747.0 ALT

—

——0Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.3h CVE-2026-1199317.0 ALT

—

——0Time-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.3h CVE-2026-1199104.7 MÉD

—

——0Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to disclose information locally.3h