CVE-2025-32467

Use of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-457

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01397.html

Published

Feb 10, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-32461wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_include…9.9
• CVE-2025-32462Sudo before 1.9.17p1, when used with a sudoers file that spe…8.8
• CVE-2025-32463Sudo before 1.9.17p1 allows local users to obtain root acces…7.8
• CVE-2025-32464HAProxy 2.2 through 3.1.6, in certain uncommon configuration…6.8
• CVE-2025-32465A stored XSS vulnerability in RSTickets! component 1.9.12 - …8.5
• CVE-2025-32466A SQL injection vulnerability in RSMediaGallery! component 1…6.7
• CVE-2025-32468A memory corruption vulnerability exists in the BMPv3 Image …8.8
• CVE-2025-32469A vulnerability has been identified in RUGGEDCOM ROX MX5000 …9.9
• CVE-2025-3247The Contact Form 7 plugin for WordPress is vulnerable to Ord…5.3
• CVE-2025-32470A remote unauthenticated attacker may be able to change the …7.5
• CVE-2025-32471The device’s passwords have not been adequately salted, maki…3.7
• CVE-2025-32472The multiScan and picoScan are vulnerable to a denial-of-ser…5.3