Unquoted Search Path or Element in Intel Arc & Iris Xe Graphics - WHQL - Windows Drivers - CVE-2023-29165
Published: November 23, 2023
Vulnerability identifier: #VU83459
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2023-29165
CWE-ID: CWE-428
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Intel
Affected software:
Intel Arc & Iris Xe Graphics - WHQL - Windows Drivers
Intel Arc & Iris Xe Graphics - WHQL - Windows Drivers
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to unquoted search path or element, which leads to security restrictions bypass and privilege escalation.
How to mitigate CVE-2023-29165
Install updates from vendor's website.