VULNERABILITY INTELLIGENCE
CVE-2019-14566
CVSS score7.8 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2019-11-14
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
Weakness classification
- nvd@nist.gov: CWE-20
Primary references
- secure@intel.com
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory