TI-2017-03714 Aliases CVE-2017-5736 GHSA-q3c9-x23w-92w6

Improper privilege management in Intel Software Guard Extensions Platform Software…

LOW 38CWE-269Published 2018-03-20 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-269.

Summary

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator.

Why it matters now

EPSS 0.00328 26th percentileScored 2026-11-07

Fix Fixed Software Guard Extensions Platform Software Component (Intel Corporation): 1.9.105.4232

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intel	Software Guard Extensions Platform Software Component	before 1.9.105.4232	1.9.105.4232	Patch available	CNA

Software Guard Extensions Platform Software Component VendorIntel Affected before 1.9.105.4232 Fixed in 1.9.105.4232 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:intel:software_guard_extensions_platform_software_component::::::::	before 1.9.105.42329	Vulnerable	Intel

cpe:2.3:a:intel:software_guard_extensions_platform_software_component:*:*:*:*:*:*:*:* Versions before 1.9.105.42329 Vulnerable ·Intel

Remediation

Fix · CNA Software Guard Extensions Platform Software Component (Intel Corporation) Fixed in 1.9.105.4232

Timeline

2026-10-02 Threatist record created from CVE-2017-5736
2026-10-03 Alias added: GHSA-q3c9-x23w-92w6

References

Advisory 1

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences