Known vulnerabilities in Open Enclave SDK 0.4.1

Known vulnerabilities in Open Enclave SDK 0.4.1

Vendor: Microsoft

Software: Open Enclave SDK

Version: 0.4.1

Software CPE: cpe:2.3:a:microsoft:open_enclave_sdk:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU71996 - Double Free CVE-2022-4450	CWE-415	Medium	No	No	0.18.5	07.02.2023	SB2023020742 SB2023020748 SB2023020771 and 180 more
#VU71995 - Use After Free CVE-2023-0215	CWE-416	Medium	No	No	0.18.5	07.02.2023	SB2023020742 SB2023020747 SB2023020748 and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304	CWE-208	Medium	No	No	0.18.5	07.02.2023	SB2023020742 SB2023020748 SB2023020767 and 222 more
#VU71992 - Type confusion CVE-2023-0286	CWE-843	High	No	No	0.18.5	07.02.2023	SB2023020742 SB2023020747 SB2023020748 and 223 more
#VU66522 - Exposure of sensitive information to an unauthorized actor CVE-2022-21233	CWE-200	Low	No	No	0.18.2	16.08.2022	SB2022081610 SB2022081724 SB2022081725 and 20 more
#VU64366 - Exposure of sensitive information to an unauthorized actor CVE-2022-21166	CWE-200	Low	No	No	0.18.0	14.06.2022	SB2022061454 SB2022061466 SB2022061463 and 102 more
#VU54821 - Permissions, Privileges, and Access Controls CVE-2021-33767	CWE-264	Low	No	No	0.17.1	13.07.2021	SB2021071371
#VU48579 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-28928	CWE-835	Medium	No	No	0.15.0	20.11.2020	SB2020112013 SB2020112104 SB2020112617 and 10 more
#VU21663 - Exposure of sensitive information to an unauthorized actor CVE-2019-1369	CWE-200	Low	No	No	0.7.0	09.10.2019	SB2019100922