CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel analysis.

• CWE-665
• CWE-665

• https://jovanbulck.github.io/files/acsac20-fpu.pdfExploit, Third Party Advisory
• https://jovanbulck.github.io/files/oakland24-pandora.pdfExploit, Third Party Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0561#vulnCurrentDescriptionTitleThird Party Advisory, US Government Resource
• https://nvd.nist.gov/vuln/detail/CVE-2020-15107Third Party Advisory, US Government Resource
• https://sconedocs.github.io/release5.7/Release Notes
• https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html#inpage-nav-3-3Technical Description
• https://jovanbulck.github.io/files/acsac20-fpu.pdfExploit, Third Party Advisory
• https://jovanbulck.github.io/files/oakland24-pandora.pdfExploit, Third Party Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0561#vulnCurrentDescriptionTitleThird Party Advisory, US Government Resource
• https://nvd.nist.gov/vuln/detail/CVE-2020-15107Third Party Advisory, US Government Resource
• https://sconedocs.github.io/release5.7/Release Notes
• https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html#inpage-nav-3-3Technical Description

Published

Dec 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46478The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 c…9.8
• CVE-2022-4648The Real Testimonials WordPress plugin before 2.6.0 does not…5.4
• CVE-2022-46480Incorrect Session Management and Credential Re-use in the Bl…8.1
• CVE-2022-46484Information disclosure in password protected surveys in Data…7.5
• CVE-2022-46485Data Illusion Survey Software Solutions ngSurvey version 2.4…7.5
• CVE-2022-46486A lack of pointer-validation logic in the __scone_dispatch c…5.5
• CVE-2022-46489GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered…5.5
• CVE-2022-4649The WP Extended Search WordPress plugin before 2.1.2 does no…5.4
• CVE-2022-46490GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered…5.5
• CVE-2022-46491A Cross-Site Request Forgery (CSRF) vulnerability in the Add…6.5
• CVE-2022-46492nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was di…6.5
• CVE-2022-46493Default version of nbnbk was discovered to contain an arbitr…9.8