CVE-2021-0108
published 2021-06-09CVE-2021-0108: Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation…
PriorityP430high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.26%
17.0th percentile
Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome_chrome | — | — | |
| intel | unite | < 4.2.25031 | 4.2.25031 |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-63fv-xmh7-4xvc: Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4
ghsa_unreviewed·2022-05-24
CVE-2021-0108 [HIGH] CWE-427 GHSA-63fv-xmh7-4xvc: Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4
Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Chrome
Stable Channel Update for Desktop: CVE-2022-0106
vendor_chrome·2022-01-04·CVSS 8.8
CVE-2022-0106 [HIGH] Stable Channel Update for Desktop: CVE-2022-0106
Stable Channel Update for Desktop
CVE-2022-0106: Use after free in Autofill. Reported by Khalil Zhani on 2021-12-10 [$10000][ 1248438 ] Medium CVE-2022-0107: Use after free in File Manager API
Reported by raven (@raid_akame) on 2021-09-10 [$5000][ 1248444 ] Medium CVE-2022-0108: Inappropriate implementation in Navigation
Severity: high
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-09
Published