CVE-2019-1370: Microsoft Open Enclave Software Development Kit

Medium severity, CVSS 5.5. EPSS: 1.6% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'.

Affected products

• Microsoft Open Enclave Software Development Kit: up to and including 0.7.0

Published 2019-11-12. Last modified 2026-06-17.