CVE-2021-0186

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Nov 17, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-01878.2Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation ofCVE-2021-01887.8Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentialCVE-2021-01897.8Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescaCVE-2021-01907.8Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilCVE-2021-01937.2Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enabCVE-2021-01947.2Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enabCVE-2021-01967.8Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticatedCVE-2021-01974.4Protection mechanism failure in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privilegedCVE-2021-01984.4Improper access control in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged userCVE-2021-01994.4Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged usCVE-2021-02006.7Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentialCVE-2021-02027.5On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridg
CVE-2021-0186: Medium severity, CVSS 6.7 | Vulnix