CVE-2022-37340

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Feb 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-373417.8Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileg CVE-2022-373424.8Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability Add Shortcodes Actions And Filters plugin <= 2.0.9 at WordPress.CVE-2022-373436.7Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pr CVE-2022-373449.8Missing Access Control vulnerability in PHP Crafts Accommodation System plugin <= 1.0.1 at WordPress.CVE-2022-373457.8Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially CVE-2022-373469.8EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. CVE-2022-373475.5Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a CVE-2022-373485.5Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a CVE-2022-373497.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-37359.8A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/publ CVE-2022-373507.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373515.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti