# CVE-2026-20705: Intel TDX module insecure storage of sensitive information

Source: https://junglewise.ai/threats/cve-2026-20705-intel-tdx-module-insecure-storage-of-sensitive-information  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-20705 · Severity: medium · CVSS 5.3 · Published 2026-08-11

Intel's TDX (Trust Domain Extensions) module, a security component used in enterprise processors to isolate and protect sensitive workloads, contains a flaw that allows an authenticated privileged attacker with physical access or high-level system access to read sensitive data from memory. An attacker exploiting this vulnerability could gain unauthorized access to confidential information stored within protected trust domains, potentially compromising customer data and system security.

Technologies: [Intel 4th Gen Xeon Scalable processor](https://junglewise.ai/threats/technologies/4th-gen-xeon-scalable-processor), [Intel 5th Gen Xeon Scalable processor](https://junglewise.ai/threats/technologies/5th-gen-xeon-scalable-processor), [Intel Xeon 6 processor with P-cores](https://junglewise.ai/threats/technologies/xeon-6-processor-with-p-cores), [Intel Xeon 6 SoC](https://junglewise.ai/threats/technologies/xeon-6-soc). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-20705 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20705 being exploited in the wild.

**How severe is CVE-2026-20705?** Medium severity, with a CVSS score of 5.3, published 11 August 2026.

**Which products and versions are affected?** Intel 4th Gen Xeon Scalable processor 1.5.28 and earlier; Intel 5th Gen Xeon Scalable processor 1.5.28 and earlier; Intel Xeon 6 processor with P-cores 2.0.16 and earlier; Intel Xeon 6 SoC 2.0.16 and earlier.

**Is there a fix for CVE-2026-20705?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-20705 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-20705?** Check whether you run Intel 4th Gen Xeon Scalable processor, Intel 5th Gen Xeon Scalable processor, Intel Xeon 6 processor with P-cores or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a case of insecure storage of sensitive information in the Intel TDX module's Ring 0 Trust Domain, allowing information disclosure. The attack requires a system software adversary with privileged user access and involves high complexity attack conditions, exploitable via local access without special internal knowledge or user interaction. An attacker can read sensitive data from memory that should have been protected by the TDX isolation mechanism. Intel recommends updating the TDX module firmware through system manufacturers; affected versions include 4th Gen Xeon Scalable (1.5.28 and earlier), 5th Gen Xeon Scalable (1.5.28 and earlier), Xeon 6 with P-cores (2.0.16 and earlier), and Xeon 6 SoC (2.0.16 and earlier).

## Affected products

- Intel 4th Gen Xeon Scalable processor 1.5.28 and earlier
- Intel 5th Gen Xeon Scalable processor 1.5.28 and earlier
- Intel Xeon 6 processor with P-cores 2.0.16 and earlier
- Intel Xeon 6 SoC 2.0.16 and earlier

## Timeline

- 2026-08-11: disclosed

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01436.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01436.html)

## Related threats

- [Intel TDX module improper authentication in Ring 0](https://junglewise.ai/threats/cve-2026-20885-intel-tdx-module-improper-authentication-in-ring-0)
- [Intel TDX module uncaught exception denial of service](https://junglewise.ai/threats/cve-2026-20775-intel-tdx-module-uncaught-exception-denial-of-service)
- [Intel Processors privilege escalation in Ring 3 user applications](https://junglewise.ai/threats/cve-2026-20716-intel-processors-privilege-escalation-in-ring-3-user-applications)
- [Intel Xeon firmware control flow privilege escalation](https://junglewise.ai/threats/cve-2026-20713-intel-xeon-firmware-control-flow-privilege-escalation)
- [Intel Trust Domain Extensions data authenticity verification bypass](https://junglewise.ai/threats/cve-2025-31356-intel-trust-domain-extensions-data-authenticity-verification)