What’s Vulnerable › Vulnerabilities

CVE-2018-3626

• Severity: medium (CVSS 4.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-20 · updated 2026-06-17
• Weakness: CWE-200

Description

Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.

Affected products

• Intel(R) SGX SDK software: before 1.9.6; before 2.1.2 — fixed in 1.9.6, 2.1.2

How to fix

Upgrade to a fixed version: Intel(R) SGX SDK software 1.9.6, 2.1.2. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/103479
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr
• http://www.securityfocus.com/bid/103479
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr

Get alerted when CVE-2018-3626 or the next vulnerability affects your stack