CVE-2021-0151: Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated…

PriorityP434high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.24%

14.8th percentile

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
intel	ac_3165_firmware	< 22.60	22.60
intel	ac_3168_firmware	< 22.60	22.60
intel	ac_7265_firmware	< 22.60	22.60
intel	ac_8260_firmware	< 22.60	22.60
intel	ac_8265_firmware	< 22.60	22.60
intel	ac_9260_firmware	< 22.60	22.60
intel	ac_9461_firmware	< 22.60	22.60
intel	ac_9462_firmware	< 22.60	22.60
intel	ac_9560_firmware	< 22.60	22.60
intel	ax200_firmware	< 22.60	22.60
intel	ax201_firmware	< 22.60	22.60
intel	ax210_firmware	< 22.60	22.60

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.