CVE-2022-26841: Intel Sgx SDK

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access.

Affected products

• Intel Sgx SDK: before 2.16.100.1 (fixed in 2.16.100.1); before 2.15.100.1 (fixed in 2.15.100.1)

Published 2023-02-16. Last modified 2026-06-17.