What’s Vulnerable › Vulnerabilities

CVE-2019-14566

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-14 · updated 2026-10-08
• Weakness: CWE-20

Description

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Affected products

• Intel Corporation Intel(R) Software Guard Extensions SDK: 2.3.100.49777, 2.3.101.50222, 2.4.100.51291, 2.2.100.45311, 2.3.100.46354, 2.4.100.48163 (+2)

References

• https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
• https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html

Get alerted when CVE-2019-14566 or the next vulnerability affects your stack