CVE-2017-5736

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

VendorProductVersions
Intel CorporationSoftware Guard Extensions Platform Software Componentbefore 1.9.105.4232

References

Timeline

Published
Mar 20, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-57389.1Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker witCVE-2017-57535.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an atCVE-2017-57545.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informationCVE-2017-57806.5A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57818.8A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57825.4A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57835.3A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57846.5A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57856.5A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found.CVE-2017-57865.5A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01CVE-2017-57876.5A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found.CVE-2017-57885.5A Local Disclosure of Sensitive Information vulnerability in HPE NonStop Software Essentials version T0894 T0894H02 through T0894H02^AAI was
CVE-2017-5736: High severity, CVSS 8.8 | Vulnix