Intel Quickassist Technology Library vulnerabilities

4 CVEs affecting Intel Quickassist Technology Library, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28741, published 2023-11-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22313, published 2023-11-14. Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.
• CVE-2023-28741, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-28378, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-28740, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local…