[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqNhrOnUpmHqcY8l4umpx0i8rjCW55dvaXadUgvLIHpk":3,"g5a-risk:CVE-2020-8936":112},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":36,"references":56,"referencesCount":36,"weaknesses":63,"weaknessesCount":36,"isActivelyExploited":72,"cisaInfo":27,"otxData":27,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2020-8936","What is CVE-2020-8936?","An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params and allowed the host to return a pointer that was an address within the enclave memory. This allowed an attacker to read memory values from within the enclave.","An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to va...","2020-12-15T15:15:13.127","2020-12-18T02:49:22.687",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":38,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":37},"cve-coordination@google.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",5.3,1,4.2,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":22,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00135,[47,47,47,47,47,47,47],"Medium",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"google","asylo","*","cpe:2.3:a:google:asylo:*:*:*:*:*:*:*:*",[57],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fasylo\u002Fcommit\u002F83036fd841d33baa7e039f842d131aa7881fdcc2","GitHub",[61,62],"Patch","Third Party Advisory",[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2020-8936? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-8936, a medium severity cyber security vulnerability from 2020. An arbitrary memory overwrite vulnerability in Asylo versi...","CVE-2020-8936, CVE-2020-8936 vulnerability, CVE-2020-8936 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, google security, asylo vulnerability","\u002Fwhat-is\u002Fcve-2020-8936",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-8936","Cybersecurity","CVE-2020-8936, CVE-2020-8936 vulnerability, CVE-2020-8936 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":27,"Negate":27,"Nodes":101},[102],{"Operator":103,"Negate":27,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":107},"D4356338-A28E-442E-BD14-1A927E3824E9","0.6.0",[],[],{"lastModified":11,"cacheTime":111,"version":41},1793231822768,{"score":113,"band":114,"action":115,"scoredAt":116},17,"Info","Track","2026-10-28T06:49:53.209582+00:00"]