Lucene search
+L

234 matches found

CVE
CVE
added 2023/02/16 8:00 p.m.186 views

CVE-2022-38090

CVE-2022-38090 is listed across multiple advisories (Debian DLA, ALAS, ALAS2, Cloud Foundry USN, Astra Linux) as part of Intel microcode vulnerabilities. The core issue is improper isolation of shared resources on Intel processors when using Intel SGX, potentially enabling information disclosure ...

6CVSS4.2AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/16 8:00 p.m.30 views

CVE-2022-38090

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

6CVSS6.3AI score0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/16 8:00 p.m.12 views

CVE-2022-33196

Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS7.2AI score0.00213EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2023/02/16 8:00 p.m.40 views

CVE-2022-33196

Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS6.7AI score0.00213EPSS
SaveExploits0
CVE
CVE
added 2023/02/16 8:00 p.m.181 views

CVE-2022-33196

CVE-2022-33196 is an Intel microcode issue described as: Incorrect default permissions in memory controller configurations on some Intel Xeon processors when using Intel SGX, potentially enabling privilege escalation via local access. Connected sources confirm affected components and mitigations ...

7.2CVSS6.4AI score0.00213EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/16 3:03 a.m.5 views

SUSE CVE-2022-33196

Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS7.9AI score0.00213EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2023/02/16 12:00 a.m.5 views

Intel Software Guard Extensions 安全漏洞

Intel Software Guard Extensions SGX is a set of security-related instructions from the U.S. company Intel that are built into some Intel central processors. It provides hardware-based memory encryption to isolate application-specific code and data in memory. A security vulnerability exists in...

7.2CVSS7AI score0.00213EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/16 12:00 a.m.5 views

Intel Software Guard Extensions 安全漏洞

Intel Software Guard Extensions SGX is a set of security-related instructions from the U.S. company Intel that are built into some Intel central processors. It provides hardware-based memory encryption to isolate application-specific code and data in memory. A security vulnerability exists in...

6CVSS6.3AI score0.00249EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:04 a.m.2 views

SUSE CVE-2020-0561

Improper initialization in the IntelR SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS8.7AI score0.00406EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:35 a.m.4 views

SUSE CVE-2022-0005

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...

4.9CVSS6AI score0.00198EPSS
SaveExploits0References3
Hewlett-Packard
Hewlett-Packard
added 2023/02/14 12:00 a.m.53 views

Intel 2023.1 IPU – BIOS February 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified in some Intel® Processors with Intel® Software Guard Extensions SGX that might allow information disclosure and potential vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT...

8.2CVSS1.9AI score0.00249EPSS
SaveExploits0Affected Software684
Positive Technologies
Positive Technologies
added 2023/02/14 12:00 a.m.4 views

PT-2023-9408 · Intel +4 · Intel Processors +4

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions, which may allow a privileged user to...

7.5CVSS5.7AI score0.00539EPSS
SaveExploits0References59
RedHat Linux
RedHat Linux
added 2022/11/15 10:28 a.m.9 views

hw: cpu: information disclosure via Intel Software Guard Extensions (SGX) Platform

A flaw was found in hw. Sensitive information accessible by physical probing of the JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to disclose information via physical access...

2.4CVSS5.8AI score0.00198EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/11/11 12:00 a.m.7 views

Intel SGX SDK 安全漏洞

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation USA. A security vulnerability exists in the Intel SGX SDK software that stems from prematurely releasing resources, which could allow a privileged user to...

4.4CVSS5.1AI score0.0042EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/11/11 12:00 a.m.14 views

PT-2022-18457 · Intel · Intel Sgx Sdk

Name of the Vulnerable Software and Affected Versions: IntelR SGX SDK software affected versions not specified Description: The issue is related to the premature release of a resource during its expected lifetime, which may allow a privileged user to potentially enable information disclosure via...

4.4CVSS4.2AI score0.0042EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:00 a.m.9 views

The vulnerability of the Software Guard eXtensions (SGX) processor implementation allows a hacker to gain access to protected information.

The vulnerability of the Software Guard eXtensions SGX processor implementation relates to the possibility of accessing uninitialized data that remains in the APIC Advanced Programmable Interrupt Controller registers. Exploiting this vulnerability can allow an attacker to gain access to protected...

6CVSS6.7AI score0.00325EPSS
SaveExploits0References8Affected Software3
CNNVD
CNNVD
added 2022/03/10 12:00 a.m.11 views

Occlum 安全漏洞

Occlum is a memory-safe, multiprocess library operating system for Intel SGX. A security vulnerability in util/memutil.rs in Occlum for Intel SGX prior to version 0.26.0 stems from pointer validation logic acting as an obfuscation agent. Allows a local attacker to access unauthorized information...

5.5CVSS5.8AI score0.00436EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.7 views

PT-2022-15164 · Intel +1 · Intel Processors +1

Name of the Vulnerable Software and Affected Versions: Intel processors based on Sunny Cove microarchitecture, including Ice Lake Xeon-SP, Ice Lake D, Gemini Lake, Ice Lake U, Y, and Rocket Lake Description: An elevation-of-privilege issue allows attackers to affect the system. The problem, known...

7.8CVSS9.1AI score0.00638EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.12 views

The vulnerability of the Software Guard eXtensions (SGX) processor implementation lies in the insufficient validation of input data, which allows attackers to increase their privileges.

The vulnerability of the Software Guard eXtensions SGX processor implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.2CVSS6.9AI score0.0032EPSS
SaveExploits0References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/11/17 8:15 p.m.5 views

CVE-2021-33097

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

6.6CVSS6.7AI score0.00549EPSS
SaveExploits0References2
Rows per page
Query Builder