CVE-2021-26258

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) Killer(TM) Control Center software	before version 2.4.3337.0

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00644.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00644.htmlVendor Advisory

Timeline

Published: May 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-262597.8A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary code execution and de CVE-2021-262605.5An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could CVE-2021-262625.5Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized a CVE-2021-262636.1Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote at CVE-2021-262645.5A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-ser CVE-2021-262667.5cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).CVE-2021-262677.5cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579).CVE-2021-262716.5It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles in CVE-2021-262726.5It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the CVE-2021-262737.8The Agent in NinjaRMM 5.0.909 has Incorrect Access Control.CVE-2021-262747.1The Agent in NinjaRMM 5.0.909 has Insecure Permissions.CVE-2021-262759.8The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnera