A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Mar 29, 2023 |
| Oracle_linux | — | Upgrade libvirt-daemon-config-networkUpgrade libtpmsUpgrade qemu-virtiofsdUpgrade libtpms-develUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2v-man-pages-jaUpgrade virt-v2v-man-pages-ukUpgrade ruby-hivexUpgrade libguestfs-gobject-develUpgrade perl-Sys-VirtUpgrade python3-libvirtUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-man-pages-jaUpgrade libnbd-bash-completionUpgrade libguestfs-winsupportUpgrade libvirt-wiresharkUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-bash-completionUpgrade libiscsi-develUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-gzip-filterUpgrade libvirt-develUpgrade qemu-imgUpgrade libvirt-dbusUpgrade qemu-system-x86Upgrade libguestfs-gobjectUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkitUpgrade qemu-guest-agentUpgrade swtpmUpgrade virt-v2vUpgrade libguestfs-javadocUpgrade libvirt-docsUpgrade netcf-libsUpgrade libiscsiUpgrade nbdfuseUpgrade sgabios-binUpgrade supermin-develUpgrade seabios-binUpgrade swtpm-tools-pkcs11Upgrade libguestfs-develUpgrade libguestfs-tools-cUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-coreUpgrade nbdkit-nbd-pluginUpgrade qemu-system-aarch64-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade ivshmem-toolsUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-benchmarkingUpgrade libguestfs-java-develUpgrade libvirt-daemon-kvmUpgrade libguestfs-man-pages-ukUpgrade libnbdUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcfUpgrade libguestfsUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-linuxdisk-pluginUpgrade hivex-develUpgrade qemu-system-x86-coreUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-block-iscsiUpgrade libguestfs-javaUpgrade libvirt-clientUpgrade superminUpgrade libvirt-bash-completionUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-filtersUpgrade python3-libguestfsUpgrade seavgabios-binUpgrade libvirt-daemonUpgrade libguestfs-inspect-iconsUpgrade libvirt-libsUpgrade libvirtUpgrade libguestfs-applianceUpgrade qemu-commonUpgrade nbdkit-tar-pluginUpgrade qemu-kvm-block-curlUpgrade qemu-block-glusterUpgrade libguestfs-xfsUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-develUpgrade nbdkit-ssh-pluginUpgrade swtpm-toolsUpgrade sgabiosUpgrade qemu-system-aarch64Upgrade qemu-kvm-commonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade seabiosUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-coreUpgrade swtpm-develUpgrade ruby-libguestfsUpgrade python3-libnbdUpgrade python3-hivexUpgrade nbdkit-tar-filterUpgrade nbdkit-python-pluginUpgrade nbdkit-develUpgrade lua-guestfsUpgrade qemu-block-rbdUpgrade nbdkit-vddk-pluginUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade perl-hivexUpgrade nbdkit-basic-pluginsUpgrade qemuUpgrade nbdkit-serverUpgrade nbdkit-gzip-pluginUpgrade libguestfs-toolsUpgrade swtpm-libsUpgrade qemu-kvm-block-rbdUpgrade libnbd-develUpgrade hivexUpgrade nbdkit-curl-pluginUpgrade libiscsi-utilsUpgrade virt-v2v-bash-completionUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-glusterUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-interface | May 17, 2023 | Feb 20, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub