What is CVE-2021-33767?

CVE-2021-33767 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Open Enclave SDK Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2021-33767 cover?

CVE-2021-33767 covers the following CVE IDs: CVE-2021-33767. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-33767?

CVE-2021-33767 has a CVSS v3 base score of 8.2, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-33767?

CVE-2021-33767 affects 1 product, including: Open Enclave SDK.

CVE-2021-33767HighCVSS 8.2

Open Enclave SDK Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

July 13, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-33767 →

📋 Description

How do I know if I'm affected by this vulnerability? If you have a project that used the Open Enclave SDK and you have not rebuilt it using the latest version of the SDK, you might be affected by this vulnerability. The updated SDK release is available here: Open Enclave Releases. Confirm that you are using SDK build v0.17.1 or later. For more information, see Open Enclave SDK Security Advisory for July 13, 2021.

🎯 Affected products1

Open Enclave SDK

✅ Remediation

KBGithub Advisory (Security Update) — fixed build 0.17.1

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33767
patchhttps://github.com/openenclave/openenclave/releases
referencehttps://github.com/openenclave/openenclave/security/advisories/GHSA-mj87-466f-jq42