CVE-2023-28378: Intel Quickassist Technology Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel Quickassist Technology Firmware: from 1.0, before 1.10 (fixed in 1.10); from 2.0, before 2.04 (fixed in 2.04)
• Intel Quickassist Technology Library: version 22.07.1 only

Published 2023-11-14. Last modified 2026-06-17.