SS
Product
Sgx Sdk
11
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 10Low 0
Watch
Add Sgx Sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-0186 | 6.7 | Nov 17 | Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local… Affected: through 2.12; through 2.13 |
| CVE-2022-26841 | 5.5 | Feb 16 | Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information… Affected: before 2.16.100.1; before 2.15.100.1 |
| CVE-2022-26509 | 5.5 | Feb 16 | Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access Affected: before 2.16.100.1; before 2.15.100.1 |
| CVE-2022-21127 | 5.5 | Jun 15 | Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… Affected: before 2.16.100.3; before 2.17.100.3 |
| CVE-2022-21166 | 5.5 | Jun 15 | Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via… Affected: before 2.16.100.3; before 2.17.100.3 |
| CVE-2022-21125 | 5.5 | Jun 15 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access Affected: before 2.16.100.3; before 2.17.100.3 |
| CVE-2022-21123 | 5.5 | Jun 15 | Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access Affected: before 2.16.100.3; before 2.17.100.3 |
| CVE-2021-0001 | 4.7 | Jun 9 | Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access Affected: through 2.12.100.4; through 2.13.100.4 |
| CVE-2018-3626 | 4.7 | Mar 20 | Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to… Affected: before 1.9.6; before 2.1.2 |
| CVE-2022-27499 | 4.4 | Nov 11 | Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access Affected: before 2.17.100.1; before 2.18.100.1 |
Showing 10