What’s Vulnerable › Vulnerabilities

CVE-2023-25779

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-14 · updated 2026-06-17
• Weakness: CWE-427

Description

Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel(R) Thunderbolt(TM) DCH drivers for Windows: before 88 — fixed in 88

How to fix

Upgrade to a fixed version: Intel(R) Thunderbolt(TM) DCH drivers for Windows 88. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html

Get alerted when CVE-2023-25779 or the next vulnerability affects your stack