RUSTSEC-2026-0481Published
Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low comp…
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-42067 · CVE overview and exploitation status
cve-program · CVE-2026-42067
euvd · EUVD-2026-121316
nvd · CVE-2026-42067
osv · RUSTSEC-2026-0481
- https://crates.io/crates/tdx_workload_attestation
- https://rustsec.org/advisories/RUSTSEC-2026-0481.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01520.html
- https://github.com/IntelLabs/tdx-workload-attestation/pull/86
- https://github.com/IntelLabs/tdx-workload-attestation/releases/tag/v0.2.0
Related changes
Linked by CVE identifier- `verify_x509_cert` does not check the certificate validity period · Newly collected advisory · 11 Nov 2026
- Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low comp… · Newly collected advisory · 10 Nov 2026