CVE Feed

    Dashboard / CVE / CVE-2025-22853

    CVE-2025-22853

    Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.

    Published:Aug 12, 2025
    Last Modified:Apr 15, 2026
    EPS:Aug 12, 2025
    EPSS Score:0.00016
    CVSS Score:2.3

    Affected Products

    Vendor
    Intel
    Product
    Tdx Module Software

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-662 Improper Synchronization

    Related CVEs

    CVE-2025-20044 (CVSS 5.6) — Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to po…
    CVE-2024-33607 (CVSS 5.7) — Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenti…
    CVE-2025-21096 (CVSS 1.8) — Improper buffer restrictions in the firmware for some Intel(R) TDX may allow a privileged user to potentially …
    CVE-2025-20613 (CVSS 2) — Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an a…
    CVE-2024-21850 (CVSS 8.3) — Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before…
    CVE-2024-39283 (CVSS 8.5) — Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may …
    CVE-2023-45745 (CVSS 7.9) — Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privil…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High