CVE-2019-0117

MEDIUM

Intel Core i7-6970HQ Firmware - Information Disclosure via Protected Memory Subsystem

Title source: llm
STIX 2.1

Description

Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families; Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.

Scores

CVSS v3 4.4
EPSS 0.0013
EPSS Percentile 32.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (50)
intel/core_i5-7200u_firmware
intel/core_i5-7260u_firmware
intel/core_i5-7267u_firmware
intel/core_i5-7287u_firmware
intel/core_i5-7300hq_firmware
intel/core_i5-7300u_firmware
intel/core_i5-7360u_firmware
intel/core_i5-7400_firmware
intel/core_i5-7400t_firmware
intel/core_i5-7440eq_firmware
... and 40 more
Published Nov 14, 2019
Tracked Since Feb 18, 2026