5.5

CVE-2022-21166

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Data is provided by the National Vulnerability Database (NVD)
XenXen HwPlatformx86
FedoraprojectFedora Version35
FedoraprojectFedora Version36
IntelSgx Dcap SwPlatformlinux Version < 1.14.100.3
IntelSgx Dcap SwPlatformwindows Version < 1.14.100.3
IntelSgx Psw SwPlatformwindows Version < 2.16.100.3
IntelSgx Psw SwPlatformlinux Version < 2.17.100.3
IntelSgx Sdk SwPlatformwindows Version < 2.16.100.3
IntelSgx Sdk SwPlatformlinux Version < 2.17.100.3
VMwareESXi Version7.0 Update-
VMwareESXi Version7.0 Updatebeta
VMwareESXi Version7.0 Updateupdate_1
VMwareESXi Version7.0 Updateupdate_1a
VMwareESXi Version7.0 Updateupdate_1b
VMwareESXi Version7.0 Updateupdate_1c
VMwareESXi Version7.0 Updateupdate_1d
VMwareESXi Version7.0 Updateupdate_2
VMwareESXi Version7.0 Updateupdate_2a
VMwareESXi Version7.0 Updateupdate_2c
VMwareESXi Version7.0 Updateupdate_2d
VMwareESXi Version7.0 Updateupdate_3c
VMwareESXi Version7.0 Updateupdate_3d
DebianDebian Linux Version9.0
DebianDebian Linux Version10.0
DebianDebian Linux Version11.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.19% 0.416
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.