{"id":"CVE-2019-14566","aliases":["EUVD-2019-5727","GHSA-77jw-45f6-38qv"],"status":"published","title":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow...","description":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00355,"percentile":0.2942,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2019-11-14T16:46:00Z","modified":"2026-10-08T21:17:14Z","products":[{"vendor":"intel","product":"2019.2 ipu – intel(r) sgx"},{"vendor":"intel","product":"software_guard_extensions_sdk"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14566"},{"url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support\u0026amp;utm_medium=RSS"},{"url":"https://github.com/advisories/GHSA-77jw-45f6-38qv"}],"sources":{"cve":[{"id":"CVE-2019-14566","description":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","status":"published","published":"2019-11-14T16:46:00Z","modified":"2026-10-08T21:03:16.028Z","updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2019-5727","description":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","status":"published","published":"2019-11-14T16:46:00Z","modified":"2026-10-08T21:03:16Z","updated_at":"2026-11-02T17:27:27.240961Z"}],"ghsa":[{"id":"GHSA-77jw-45f6-38qv","title":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow...","description":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","status":"published","published":"2022-05-24T17:00:59Z","modified":"2024-04-04T02:39:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:56:10.534826Z"}],"nvd":[{"id":"CVE-2019-14566","description":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","status":"published","published":"2019-11-14T17:15:14.617Z","modified":"2026-10-08T21:17:14.277Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:35.052973Z"}]}}