CVE-2023-28388

CVE-2023-28388 affects Intel® Chipset Device Software prior to version 10.1.19444.8378. Affected component vulnerability is an uncontrolled search path element that could let an authenticated, local attacker escalate privileges. Intel’s advisory (Intel-SA-00870) confirms the vulnerability and rec...

CVE-2023-27513

CVE-2023-27513 pertains to the Intel® Server Information Retrieval Utility. The issue is an uncontrolled search path element in the software prior to version 16.0.9, which may allow an authenticated local user to potentially escalate privileges. Affected product: Intel® Server Information Retriev...

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27513

Uncontrolled search path element in some IntelR Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34430

CVE-2023-34430 affects Intel Battery Life Diagnostic Tool software prior to version 2.2.1. The issue is an uncontrolled search path vulnerability in the tool, which may allow an authenticated user to escalate privileges via local access. Intel’s advisory (INTEL-SA-00843) confirms the vulnerabilit...

CVE-2023-34430

Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29161

Uncontrolled search path in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29161

CVE-2023-29161 concerns Intel® OFU (One Boot Flash Update) software prior to version 14.1.31. The Red Hat/RedHat-like and NVD records describe an issue of Uncontrolled search path that may allow an authenticated user to achieve privilege escalation via local access . Intel’s own advisory reiterat...

CVE-2023-29161

Uncontrolled search path in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32658

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32658

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34350

Uncontrolled search path element in some IntelR XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34350

Uncontrolled search path element in some IntelR XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Lithium. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in some Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32204 Description: Improper access control in so...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23046)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23046 advisory. - Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a deni...