Intel Driver \& Support Assistant vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Intel Driver \& Support Assistant, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.6CVE-2023-27515inteldriver_\&_support_assistant
EPSS score
0.57%
Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.7.3CVE-2023-45743inteldriver_\&_support_assistant
EPSS score
0.21%
Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access.7.8CVE-2023-50197inteldriver_\&_support_assistant
EPSS score
0.25%
Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845.6.7CVE-2023-35062inteldriver_\&_support_assistant
EPSS score
0.18%
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access.