CVE-2018-3700

Severity: medium (CVSS 6.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-02-18 · updated 2026-06-17
Weakness: CWE-94

Description

Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access.

Affected products

Intel Usb 3.0 Extensible Host Controller Driver: before 5.0.4.43v2 — fixed in 5.0.4.43v2

How to fix

Upgrade to a fixed version: Intel Usb 3.0 Extensible Host Controller Driver 5.0.4.43v2. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/107073
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00200.html
http://www.securityfocus.com/bid/107073
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00200.html

Get alerted when CVE-2018-3700 or the next vulnerability affects your stack