CVE-2023-26592

CWE-502 — Deserialization of Untrusted Data2 documents2 sources

Severity

3.8LOW

EPSS

0.1%

top 77.58%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Thunderbolt DCH Driver

Timeline

PublishedFeb 14

Description

Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:LExploitability: 2.0 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5intel(r)_thunderbolt(tm)_dch_drivers_for_windowsbefore version 88

▶NVDintel/thunderbolt_dch_driver< 88

🔴Vulnerability Details

CVEList

CVE-2023-26592: Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent↗2024-02-14

▶