CVE-2023-32660: Intel Thunderbolt 3 Controller Firmware

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel Thunderbolt 3 Controller Firmware: before 46 (fixed in 46)

Published 2023-11-14. Last modified 2026-06-17.