Intel Driver \& Support Assistant vulnerabilities
24 vulnerabilities
Known vulnerabilities in Intel Driver \& Support Assistant, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-12148intel corporationintel(r) driver & support assistant+1
EPSS score0.35%
Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.CVE-2018-3610intel corporationintel driver and support assistant+1EPSS score0.31%
SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or a denial of service condition.CVE-2021-0090inteldriver_\&_support_assistantEPSS score0.29%
Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.CVE-2021-0094inteldriver_\&_support_assistantEPSS score0.28%
Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.CVE-2021-0073inteldriver_\&_support_assistantEPSS score0.25%
Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2020-0568inteldriver_\&_support_assistantEPSS score0.36%
Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.CVE-2020-24460inteldriver_\&_support_assistantEPSS score0.25%
Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.CVE-2020-12302inteldriver_\&_support_assistantEPSS score0.28%
Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2022-26017inteldriver_\&_support_assistantEPSS score0.39%
Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.CVE-2022-32764inteldriver_\&_support_assistantEPSS score0.13%
Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2022-30530inteldriver_\&_support_assistantEPSS score0.23%
Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2024-36294inteldriver_\&_support_assistantEPSS score0.14%
Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2024-36488inteldriver_\&_support_assistantEPSS score0.16%
Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-11146inteldriver_\&_support_assistantEPSS score0.35%
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-11114inteldriver_\&_support_assistantEPSS score0.33%
Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.CVE-2019-11095inteldriver_\&_support_assistantEPSS score0.38%
Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access.CVE-2019-11145inteldriver_\&_support_assistantEPSS score0.30%
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-42099inteldriver_\&_support_assistantEPSS score0.33%
Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21846.CVE-2023-39425inteldriver_\&_support_assistantEPSS score0.20%
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-25073inteldriver_\&_support_assistantEPSS score0.18%
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access.