---
id: CVE-2019-14565
title: >-
  Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291
  and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an
  authenticated user to enable information disclosure, escalation of privilege
  or denial…
summary: >-
  Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291
  and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an
  authenticated user to enable information disclosure, escalation of privilege
  or denial…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-665
vendor: intel
product: software_guard_extensions_sdk
affected:
  - software_guard_extensions_sdk = 2.3.100.49777
  - software_guard_extensions_sdk = 2.3.101.50222
  - software_guard_extensions_sdk = 2.4.100.51291
  - software_guard_extensions_sdk = 2.2.100.45311
  - software_guard_extensions_sdk = 2.3.100.46354
  - software_guard_extensions_sdk = 2.4.100.48163
  - software_guard_extensions_sdk = 2.5.100.49891
  - software_guard_extensions_sdk = 2.6.100.51363
published: '2019-11-14'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:17:14.130'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-14565'
references:
  - url: >-
      https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
    label: secure@intel.com
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
    label: secure@intel.com
  - url: >-
      https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00355
epssPercentile: 0.2709
ingestedAt: '2026-10-08T22:11:53.704Z'
---

## Overview

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

## Affected

- `software_guard_extensions_sdk = 2.3.100.49777`
- `software_guard_extensions_sdk = 2.3.101.50222`
- `software_guard_extensions_sdk = 2.4.100.51291`
- `software_guard_extensions_sdk = 2.2.100.45311`
- `software_guard_extensions_sdk = 2.3.100.46354`
- `software_guard_extensions_sdk = 2.4.100.48163`
- `software_guard_extensions_sdk = 2.5.100.49891`
- `software_guard_extensions_sdk = 2.6.100.51363`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.