72 matches found
CVE-2021-33767
Open Enclave SDK Elevation of Privilege Vulnerability...
Privilege escalation
Open Enclave SDK Elevation of Privilege Vulnerability...
CVE-2021-33767 Open Enclave SDK Elevation of Privilege Vulnerability
...
CVE-2021-33767
The CVE concerns Open Enclave SDK with an Elevation of Privilege vulnerability. Connected sources describe an issue of insecure privilege management in the Open Enclave SDK, enabling privilege escalation. Details about affected versions or a fix are not specified in the provided documents; one PT...
CVE-2021-33767
Open Enclave SDK Elevation of Privilege Vulnerability...
CVE-2021-33767: Undefined Security Weakness
Open Enclave SDK Elevation of Privilege Vulnerability...
KLA12245 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code can be...
PT-2021-6051
Name of the Vulnerable Software and Affected Versions Open Enclave SDK affected versions not specified Description The issue is related to insecure privilege management. Exploitation of this issue may allow an attacker to bypass security restrictions and elevate their privileges. Recommendations ...
Microsoft Open Enclave SDK Information Disclosure Vulnerability (CNVD-2020-64264)
Microsoft Open Enclave SDK is a Microsoft SDK Software Development Kit for building secure zone applications in C and C ++. A security vulnerability exists in Open Enclave versions prior to 0.12.0 that stems from an information disclosure vulnerability that exists when an Enclave application uses...
CVE-2020-15224
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...
CVE-2020-15224
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...
Information disclosure
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...
CVE-2020-15224 Socket syscalls can leak enclave memory contents in Open Enclave
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...
CVE-2020-15224
CVE-2020-15224 : Open Enclave before 0.12.0 has an information disclosure vulnerability when an enclave application uses socket-related syscalls (sockets.edl) loaded by a malicious host. An attacker who logs in and runs a crafted application could read privileged data from the enclave heap across...
CVE-2020-15224
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...
PT-2020-14291
Name of the Vulnerable Software and Affected Versions Open Enclave versions prior to 0.12.0 Description An information disclosure issue exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. This could allow an attacker to read...
CVE-2020-15224: Files or Directories Accessible to External Parties
In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the...
Open Enclave SDK Memory Error Unauthorized Access
The vulnerability of the Open Enclave SDK software development tools is related to an object processing error in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...