CVE-2023-0664CWE-250

A flaw was found in the QEMU Guest Agent service for Windows

High · published March 29, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2023-03-29T00:00Z
EPSS history
Timeline
  • 29 MAR 00:00Z
    A flaw was found in the QEMU Guest Agent service for Windows
    cvelistv5