{"metadata": {"vulnerability": "CVE-2026-44685", "count": 14, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-14T22:09:54.074Z", "date_only": false, "value": "2026-07-14T22:09:54.074Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-44685", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-10T17:45:48.332Z", "date_only": false, "value": "2026-11-10T17:45:48.332Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44685", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T17:45:48.332Z", "date_only": false, "value": "2026-11-10T17:45:48.332Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-44685", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T17:45:48.332Z", "date_only": false, "value": "2026-11-10T17:45:48.332Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / intel", "record": "CVE-2026-44685", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T18:03:45.403Z", "date_only": false, "value": "2026-11-10T18:03:45.403484Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117593461551705610", "record": "CVE-2026-44685", "field": "creation_timestamp", "uuid": "c6b3dca6-2596-4e5a-af19-5d48d3757525", "content": "CVE-2026-44685  Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.\nhttps://www.cve.org/CVERecord?id=CVE-2026-44685https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html#intel#CVE_2026_44685#bot", "url": "https://infosec.exchange/users/cve/statuses/117593461551705610"}, {"timestamp": "2026-11-10T18:17:40Z", "date_only": false, "value": "2026-11-10T18:17:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QQPW-8VXP-RGJ6", "record": "GHSA-QQPW-8VXP-RGJ6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-10T18:17:40.273Z", "date_only": false, "value": "2026-11-10T18:17:40.273", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44685", "record": "FKIE_CVE-2026-44685", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T18:31:51Z", "date_only": false, "value": "2026-11-10T18:31:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QQPW-8VXP-RGJ6", "record": "GHSA-QQPW-8VXP-RGJ6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T18:31:51Z", "date_only": false, "value": "2026-11-10T18:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QQPW-8VXP-RGJ6", "record": "GHSA-QQPW-8VXP-RGJ6", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T19:10:03.672Z", "date_only": false, "value": "2026-11-10T19:10:03.672716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzy5dpbwro2q", "record": "CVE-2026-44685", "field": "creation_timestamp", "uuid": "e17c2bd9-8125-49a5-a55c-adcf89603954", "content": "CVE-2026-44685\nThe migration feature in Intel\u2019s Trusted Domain Extensions can be tricked into accepting a fake authentication request, letting a malicious user increase their system rights. This could let an attacker run code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzy5dpbwro2q"}, {"timestamp": "2026-11-10T20:08:07.469Z", "date_only": false, "value": "2026-11-10T20:08:07.469167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzyaljvo5y2a", "record": "CVE-2026-44685", "field": "creation_timestamp", "uuid": "9840023e-ad3f-4ddc-a8cb-4fc356b63f66", "content": "\ud83d\udea8 CVE-2026-44685 \u2014 CVSS 9.3 CRITICAL\n\nAuthentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Doma...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-44685\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzyaljvo5y2a"}, {"timestamp": "2026-11-10T22:06:57.400Z", "date_only": false, "value": "2026-11-10T22:06:57.400", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44685", "record": "FKIE_CVE-2026-44685", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T00:00:44.343Z", "date_only": false, "value": "2026-11-11T00:00:44.343816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mzynlgfjvf2g", "record": "cve-2026-44685", "field": "creation_timestamp", "uuid": "304904c9-6367-4176-adb9-b30a6d42d8fa", "content": "Intel TDX MigTD faces CRITICAL auth bypass (CVE-2026-44685) enabling local privilege escalation at hypervisor level. Monitor for updates \u2014 patches pending. https://radar.offseq.com/threat/cve-2026-44685-cwe-290-authentication-bypass-by-spoofing-in-intelr-tdx-migration-trust-domain-migtd-a03096d7f...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mzynlgfjvf2g"}, {"timestamp": "2026-11-11T00:01:42.028Z", "date_only": false, "value": "2026-11-11T00:01:42.028882Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117594865019241633", "record": "cve-2026-44685", "field": "creation_timestamp", "uuid": "b63b013d-92e4-434d-a1ff-d951c0f47e6c", "content": "CVE-2026-44685 | Intel TDX MigTD CRITICAL vuln: Auth bypass by spoofing in rebinding protocol risks privilege escalation at Ring 0. Local, low-complexity exploit \u2014 patches pending. Details: https://radar.offseq.com/threat/cve-2026-44685-cwe-290-authentication-bypass-by-spoofing-in-intelr-tdx-migration-trust-domain-migtd-a03096d7f4d400d0 #OffSeq #Vulnerability #Intel #PrivilegeEscalation", "url": "https://infosec.exchange/users/offseq/statuses/117594865019241633"}], "metrics": {"as_of": "2026-11-11T00:40:55.720Z", "anchors": {"origin": {"timestamp": "2026-11-10T17:45:48.332Z", "date_only": false, "value": "2026-11-10T17:45:48.332Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44685", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-10T17:45:48.332Z", "date_only": false, "value": "2026-11-10T17:45:48.332Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44685", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 24907.388667, "hours": 6.918719074166667, "days": 0.2882799614236111, "min_seconds": 24907.388667, "max_seconds": 24907.388667, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-10T17:45:48.332Z", "date_only": false, "value": "2026-11-10T17:45:48.332Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44685", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T00:40:55.720Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}