← Vulnerability feed

Vulnerability record · CVE-2009-0066 · published 7 January 2009

CVE-2009-0066: Intel trusted execution technology vulnerability

Intel · Trusted Execution Technology

Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

7.6 CVSS 2.0 High EPSS 2.2% · top 18.2%
7.6CVSS 2.0 base score
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk
http://invisiblethingslab.com/press/itl-press-2009-01.pdf
http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html
http://www.securityfocus.com/bid/33119
http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk
http://invisiblethingslab.com/press/itl-press-2009-01.pdf
http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html
http://www.securityfocus.com/bid/33119

Track CVE-2009-0066 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2020-12297Intel converged security and manageability engine vulnerabilityImproper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14…EPSS 0.45%7.8CVE-2020-12303Intel converged security and manageability engine use after free vulnerabilityUse after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel…EPSS 0.37%7.8CVE-2019-0091Intel converged security and management engine code injection vulnerabilityCode injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may …EPSS 0.52%6.8CVE-2020-8745Intel converged security and manageability engine vulnerabilityInsufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 …EPSS 0.38%6.8CVE-2020-8705Intel converged security and manageability engine insecure default initialization vulnerabilityInsecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13…EPSS 0.50%4.6CVE-2020-8751Intel converged security and manageability engine vulnerabilityInsufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthe…EPSS 0.41%

Source: NIST National Vulnerability Database (record CVE-2009-0066), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.