CVE-2022-41628

Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:intel:nuc_p14e_laptop_element:*:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*

History

23 May 2023, 15:59

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:nuc_p14e_laptop_element:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*
First Time Microsoft windows 10 1507
Microsoft windows 10 1809
Microsoft windows 10 21h1
Intel nuc P14e Laptop Element
Microsoft windows 10 1703
Microsoft windows 10 2004
Microsoft windows 10 21h2
Intel
Microsoft windows 10 1903
Microsoft windows 10 1607
Microsoft
Microsoft windows 10 1909
Microsoft windows 10 22h2
Microsoft windows 10 20h2
Microsoft windows 10 1803
Microsoft windows 10 1709
Microsoft windows 10 1511
References (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00802.html - (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00802.html - Vendor Advisory
CWE CWE-427
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8

10 May 2023, 14:38

Type Values Removed Values Added
New CVE

Information

Published : 2023-05-10 14:15

Updated : 2023-12-10 15:01


NVD link : CVE-2022-41628

Mitre link : CVE-2022-41628

CVE.ORG link : CVE-2022-41628


JSON object : View

Products Affected

microsoft

  • windows_10_21h2
  • windows_10_2004
  • windows_10_1809
  • windows_10_21h1
  • windows_10_1607
  • windows_10_1803
  • windows_10_1903
  • windows_10_22h2
  • windows_10_1511
  • windows_10_1507
  • windows_10_20h2
  • windows_10_1909
  • windows_10_1703
  • windows_10_1709

intel

  • nuc_p14e_laptop_element
CWE
CWE-427

Uncontrolled Search Path Element