CVE-2021-33097

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for Intel(R) SGX may allow a privileged user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published: Nov 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-330985.5Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potential CVE-2021-33107.8Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code executi CVE-2021-331017.8Uncontrolled search path in the Intel(R) GPA software before version 21.2 may allow an authenticated user to potentially enable escalation o CVE-2021-331036.7Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable CVE-2021-331045.5Improper access control in the Intel(R) OFU software before version 14.1.28 may allow an authenticated user to potentially enable denial of CVE-2021-331055.5Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an a CVE-2021-331067.8Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable escalation of privil CVE-2021-331074.6Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and In CVE-2021-331086.7Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially en CVE-2021-33119.8An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a logout) once a new lo CVE-2021-331106.5Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before CVE-2021-331138.1Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may