Intel Sgx Dcap vulnerabilities

6 CVEs affecting Intel Sgx Dcap, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-42776, published 2024-02-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-21123, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 6.9% chance of exploitation in the next 30 days. Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2022-21166, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 6.5% chance of exploitation in the next 30 days. Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2022-21125, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 6.5% chance of exploitation in the next 30 days. Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2022-21127, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 5.5% chance of exploitation in the next 30 days. Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2023-42776, published 2024-02-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access.
• CVE-2021-0001, published 2021-06-09. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.