#VU83459 Unquoted Search Path or Element in Intel Arc & Iris Xe Graphics - WHQL - Windows Drivers - CVE-2023-29165
Published: November 23, 2023
Vulnerability identifier: #VU83459
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2023-29165
CWE-ID: CWE-428
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Intel Arc & Iris Xe Graphics - WHQL - Windows Drivers
Intel Arc & Iris Xe Graphics - WHQL - Windows Drivers
Software vendor:
Intel
Intel
Description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to unquoted search path or element, which leads to security restrictions bypass and privilege escalation.
Remediation
Install updates from vendor's website.