CVE-2022-34405

Published Jan 26, 2023

Last updated a year ago

Overview

Description
An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system.
Source
security_alert@emc.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
7.3
Impact score
5.9
Exploitability score
1.3
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

nvd@nist.gov
NVD-CWE-Other
security_alert@emc.com
CWE-285

Social media

Hype score
Not currently trending

Configurations