CVE-2019-14566

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2019
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-145687.8Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to potentially enable escCVE-2019-145697.8Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of CVE-2019-14577.8A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'MicroCVE-2019-145707.8Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of sCVE-2019-145745.5Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentiallyCVE-2019-145757.8Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via loCVE-2019-14587.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k CVE-2019-145847.8Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-145868.0Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosureCVE-2019-145876.5Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.CVE-2019-145905.5Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentCVE-2019-145915.5Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentia