CVE-2021-0109

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Feb 17, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-01105.5Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to poCVE-2021-01116.7NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of priCVE-2021-01127.3Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enablCVE-2021-01136.5Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthCVE-2021-01146.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of priviCVE-2021-01156.7Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via lCVE-2021-01167.8Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilegCVE-2021-01177.8Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege viaCVE-2021-01186.7Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilegeCVE-2021-01196.2Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileCVE-2021-01205.5Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an auCVE-2021-01217.8Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100
CVE-2021-0109: High severity, CVSS 7.8 | Vulnix