CVE-2023-33874

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-338755.5Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthen CVE-2023-338768.8A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code CVE-2023-338777.8Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticate CVE-2023-338787.8Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authent CVE-2023-338793.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg CVE-2023-33886.1The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in v CVE-2023-338803.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg CVE-2023-338815.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338825.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338835.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338845.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338855.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv