CVE-2022-27499

mediumpriority · track · 28EPSS 0.004 · 36 %ileexploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.42% (36th) EPSS

CVSS 4.4 · medium

Is it mine?

3 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.

cvss

Technical severity, 0–10. One row per scoring source.

4.4

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.5–4.4

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 0.8 · impact 3.6

v3.12.5lowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:Nsecondary · ENISA EU

v3.12.5lowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:Nsecondary · secure@intel.comexploitability 0.8 · impact 1.4

v3.14.2mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-672USprimary

exploits (1)

Public proof-of-concept and weaponised exploit code.

web-logs2/snapshot-demoCVE-2022-27499PoC · poc_in_github

affected products (3)

Products and version ranges known to be affected.

n/a Intel(R) SGX SDK software≤ See referencesenisa_euvdEU
intel sgx sdk< 2.17.100.1nvdUScpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:*:*:*
intel sgx sdk< 2.18.100.1nvdUScpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2022-11-11modified 2026-06-17

related (175)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2019-5736US	high8.6	98.5% (100th)	Exploit	2019-02-11
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveragi…
CVE-2019-17638US	critical9.4	11.1% (96th)	Exploit	2020-07-09
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, t…
CVE-2020-24030US	critical9.8	2.67% (86th)	Exploit	2020-09-02
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14,…
CVE-2024-23638US	medium6.5	60.1% (99th)	—	2024-01-24
Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error re…
CVE-2020-11027US	high8.1	13.6% (96th)	Exploit	2020-04-30
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user…

+170 more

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan