CVE-2022-46487: Scontain Scone

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel analysis.

Affected products

• Scontain Scone: before 5.8.0 (fixed in 5.8.0)

Published 2023-12-30. Last modified 2026-06-17.