Intel SGX DCAP for Windows: Input-validation flaw in the Windows DCAP components allowing local information disclosure

Impact

Input-validation flaw in the Windows DCAP components allowing local information disclosure. Low severity, but DCAP is the attestation plumbing - anything that touches it deserves a look in a confidential-compute deployment.

Who can reach it

Local authenticated user on a Windows host running DCAP.

What to do

Update SGX DCAP for Windows to 1.19.100.3 or later. Userspace, service restart.

References

Related entries

• AMD processors - speculative inference of control registers despite UMIP: Part of the Transient Scheduler Attacks batchCVE-2024-36348 · AMD processors - speculative inference of control registers despite UMIPLow
• AMD processors - speculative inference of TSC_AUX when reads are disabled: Sibling of the other Transient SchedulerCVE-2024-36349 · AMD processors - speculative inference of TSC_AUX when reads are disabledLow
• Hitachi VSP One Block: firmware update path does not validate the image before applying itCVE-2025-0824 · Hitachi Virtual Storage Platform One Block 23/24/26/28 (firmware update validation)Low
• Arm C1-Pro before r1p2; Trusted Firmware-A v2.10 and later on multi-core configurations with the CME complex enabledCVE-2026-0995 · Arm C1-Pro before r1p2; Trusted Firmware-A v2.10 and later on multi-core configurations with the CME complex enabledLow
• EDK II NetworkPkg (IScsiDxe, Ready-To-Transfer PDU handling): A malicious iSCSI target sends a crafted R2T PDUCVE-2025-2295 · EDK II NetworkPkg (IScsiDxe, Ready-To-Transfer PDU handling)Low
• Dell iDRAC9 / iDRAC10 (memory erase, data remanence): Data survives an iDRAC memory erase and stays readableCVE-2026-70412 · Dell iDRAC9 / iDRAC10 (memory erase, data remanence)Low