{"id":"CVE-2019-14566","title":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","summary":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-20"],"vendor":"intel","product":"software_guard_extensions_sdk","affected":["software_guard_extensions_sdk = 2.3.100.49777","software_guard_extensions_sdk = 2.3.101.50222","software_guard_extensions_sdk = 2.4.100.51291","software_guard_extensions_sdk = 2.2.100.45311","software_guard_extensions_sdk = 2.3.100.46354","software_guard_extensions_sdk = 2.4.100.48163","software_guard_extensions_sdk = 2.5.100.49891","software_guard_extensions_sdk = 2.6.100.51363"],"published":"2019-11-14","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:14.277","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-14566","references":[{"url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS","label":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","label":"secure@intel.com"},{"url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00355,"epssPercentile":0.2709,"ingestedAt":"2026-10-08T22:11:53.704Z","slug":"CVE-2019-14566","body":"## Overview\n\nInsufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.\n\n## Affected\n\n- `software_guard_extensions_sdk = 2.3.100.49777`\n- `software_guard_extensions_sdk = 2.3.101.50222`\n- `software_guard_extensions_sdk = 2.4.100.51291`\n- `software_guard_extensions_sdk = 2.2.100.45311`\n- `software_guard_extensions_sdk = 2.3.100.46354`\n- `software_guard_extensions_sdk = 2.4.100.48163`\n- `software_guard_extensions_sdk = 2.5.100.49891`\n- `software_guard_extensions_sdk = 2.6.100.51363`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}