CVE-2020-0561
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user...
7.8 HighFix available
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.41%Down 8.3 points since Apr 14, 2021
What each source reports
NVD Score used
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
CVE-2020-0561- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-665
- Updated
- 2026-11-02
CVE List No score
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
CVE-2020-0561- Updated
- 2026-11-02
EUVDEUVD-2020-2059 No score
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
EUVD-2020-2059- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r4p7-pmgm-2v37 No score
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user...
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
GHSA-r4p7-pmgm-2v37- Weakness
- CWE-665
- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0604-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 81.0.4044.129 (boo#1170107):
- CVE-2020-0561: Fixed a use after free in storage
- CVE-2020-6462: Fixed a use after free in task scheduling
- CVE-2020-6459: Fixed a use after free in payments
- CVE-2020-6460: Fixed an insufficient data validation in URL formatting
- CVE-2020-6458: Fixed an out of bounds read and write in PDFium
- Record
openSUSE-SU-2020:0604-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0615-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 81.0.4044.129 (boo#1170107):
- CVE-2020-0561: Fixed a use after free in storage
- CVE-2020-6462: Fixed a use after free in task scheduling
- CVE-2020-6459: Fixed a use after free in payments
- CVE-2020-6460: Fixed an insufficient data validation in URL formatting
- CVE-2020-6458: Fixed an out of bounds read and write in PDFium
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2020:0615-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumSUSE:Package Hub 15 SP1 |
before 81.0.4044.129-bp151.3.75.1 | 81.0.4044.129-bp151.3.75.1 |
chromiumopenSUSE:Leap 15.1 |
before 81.0.4044.129-bp151.3.75.1 | 81.0.4044.129-bp151.3.75.1 |
chromiumSUSE:Package Hub 15 SP1 |
before 81.0.4044.129-bp151.3.79.1 | 81.0.4044.129-bp151.3.79.1 |
chromiumopenSUSE:Tumbleweed |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-0561 is a high vulnerability (CVSS 7.8) in Intel Software Guard Extensions Sdk, published February 13, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in chromium 81.0.4044.129-bp151.3.75.1.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-00336.html
lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html
nvd.nist.gov/vuln/detail/CVE-2020-0561
github.com/advisories/GHSA-r4p7-pmgm-2v37
Show 194 moreShow less
bugzilla.suse.com/1170107
suse.com/security/cve/CVE-2020-0561
This page doesn't list everything
Left out here: 2,118 references. The JSON record has them.