Intel Smart Sound Technology vulnerabilities

3 CVEs affecting Intel Smart Sound Technology, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3672, published 2018-08-01.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-3670, published 2018-08-01. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow.
• CVE-2018-3672, published 2018-08-01. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.
• CVE-2018-3666, published 2018-08-01. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow.