CVE-2026-20705

The record

Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

Affected packages

Related vulnerabilities

• CVE-2026-87951 Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service… CWE-922
• CVE-2026-44629 Improper access control to the Synergis Softwire installation folder. CWE-922
• CVE-2026-47362 In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed… CWE-922
• CVE-2026-46511 HAX CMS helps manage microsite universe with PHP or NodeJs backends. CWE-922
• CVE-2026-5515 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive… CWE-922
• GHSA-x3x5-7h4h-gwxg HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack CWE-922
• CVE-2026-7257 ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information… CWE-922
• CVE-2026-40868 Kyverno is a policy engine designed for cloud native platform engineering teams. CWE-922