CVE-2019-1369

5.5 mediumEPSS 2.1%

Medium (5.5) in microsoft open enclave software development kit. EPSS 2.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:open_enclave_software_development_kit

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1369
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1369

Check your stack JSON