---
id: CVE-2019-14566
title: >-
  Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows
  versions may allow an authenticated user to enable information disclosure,
  escalation of privilege or denial of service via local access.
summary: >-
  Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows
  versions may allow an authenticated user to enable information disclosure,
  escalation of privilege or denial of service via local access.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-20
vendor: intel
product: software_guard_extensions_sdk
affected:
  - software_guard_extensions_sdk = 2.3.100.49777
  - software_guard_extensions_sdk = 2.3.101.50222
  - software_guard_extensions_sdk = 2.4.100.51291
  - software_guard_extensions_sdk = 2.2.100.45311
  - software_guard_extensions_sdk = 2.3.100.46354
  - software_guard_extensions_sdk = 2.4.100.48163
  - software_guard_extensions_sdk = 2.5.100.49891
  - software_guard_extensions_sdk = 2.6.100.51363
published: '2019-11-14'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:17:14.277'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-14566'
references:
  - url: >-
      https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
    label: secure@intel.com
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
    label: secure@intel.com
  - url: >-
      https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00355
epssPercentile: 0.2709
ingestedAt: '2026-10-08T22:11:53.704Z'
---

## Overview

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

## Affected

- `software_guard_extensions_sdk = 2.3.100.49777`
- `software_guard_extensions_sdk = 2.3.101.50222`
- `software_guard_extensions_sdk = 2.4.100.51291`
- `software_guard_extensions_sdk = 2.2.100.45311`
- `software_guard_extensions_sdk = 2.3.100.46354`
- `software_guard_extensions_sdk = 2.4.100.48163`
- `software_guard_extensions_sdk = 2.5.100.49891`
- `software_guard_extensions_sdk = 2.6.100.51363`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.