CVE-2023-24463

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	Intel(R) Thunderbolt(TM) DCH drivers for Windows	before version 88

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.htmlVendor Advisory

Timeline

Published: Feb 14, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-244645.4Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the pro CVE-2023-244655.5Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer refere CVE-2023-244669.8Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.CVE-2023-244679.8Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.CVE-2023-244689.8Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2 CVE-2023-244696.1Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0 CVE-2023-24476.1The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. This is due to missing CVE-2023-244709.1Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.CVE-2023-244716.5An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug f CVE-2023-244727.5A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially c CVE-2023-244737.5An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. CVE-2023-244747.5Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message