CVE-2022-42465: Intel One Boot Flash Update

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel One Boot Flash Update: before 14.1.30 (fixed in 14.1.30)

Published 2023-05-10. Last modified 2026-06-17.