CVE-2023-33867

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-92 CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Aug 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-338689.8The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.CVE-2023-338699.8Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.CVE-2023-33875.4The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lana_text_to_image' and 'lana_text_to_img'CVE-2023-338707.8Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially en CVE-2023-338717.5Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user t CVE-2023-338725.5Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable informati CVE-2023-338737.8This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to Sys CVE-2023-338747.3Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before CVE-2023-338755.5Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthen CVE-2023-338768.8A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code CVE-2023-338777.8Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticate CVE-2023-338787.8Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authent