CVE-2022-38090

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-922

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors with Intel(R) Software Guard Extensions (SGX)	See references

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.htmlVendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.htmlVendor Advisory

Timeline

Published: Feb 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-380938.8Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress.CVE-2022-380948.8OS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authen CVE-2022-380954.3Cross-Site Request Forgery (CSRF) vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 at WordPress.CVE-2022-380965.5A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel CVE-2022-380977.8A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroyi CVE-2022-380997.8Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged use CVE-2022-38106.5A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the fi CVE-2022-381007.5The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remo CVE-2022-381017.8Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an aut CVE-2022-381024.4Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may al CVE-2022-381037.8Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated use CVE-2022-381047.2Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari