CVE-2023-26596 LOW

CVE-2023-26596

Vendor N/A
Product Intel(R) Thunderbolt(TM) DCH drivers for Windows
Weakness CWE-284
Published February 14, 2024
Last update August 15, 2024
View on NVD All CVEs

CVSS base score

2.5/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.

Key dates

02Disclosure timeline

February 14, 2024 CVE published
August 15, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-53112 GLPI's incomprehensive permission checks can lead to data removal from allowed users CVE-2024-0452 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback CVE-2023-1490 Max Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access control CVE-2023-24512 On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. CVE-2026-1079 A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension.