Intel System Support Utility vulnerabilities

2 CVEs affecting Intel System Support Utility, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40156, published 2024-02-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0088, published 2019-01-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access.
• CVE-2023-40156, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access.