CVE-2023-27307 — DEPRECATED: Improper Sanitization of Custom Special Characters in Intel Thunderbolt DCH Driver

CWE-92 — DEPRECATED: Improper Sanitization of Custom Special Characters3 documents3 sources

Severity

3.8LOWNVD

EPSS

0.1%

top 74.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Thunderbolt DCH Driver

Timeline

PublishedFeb 14

Latest updateOct 10

Description

Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:NExploitability: 2.0 | Impact: 1.4

Affected Packages1 packages

▶NVDintel/thunderbolt_dch_driver< 88

🔴Vulnerability Details

GHSA

GHSA-v8c3-f895-g4r9: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially↗2024-10-10

▶

CVEList

CVE-2023-27307: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially↗2024-02-14

▶