A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Mar 29, 2023 |
| Oracle_linux | — | Upgrade nbdkit-gzip-filterUpgrade perl-Sys-VirtUpgrade python3-libvirtUpgrade ruby-hivexUpgrade virt-v2v-man-pages-jaUpgrade libiscsi-develUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade libguestfs-man-pages-jaUpgrade libtpms-develUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-config-nwfilterUpgrade netcfUpgrade libiscsiUpgrade nbdkit-nbd-pluginUpgrade nbdkitUpgrade seabios-binUpgrade nbdfuseUpgrade libguestfsUpgrade virt-v2v-man-pages-ukUpgrade qemu-system-x86Upgrade libvirt-daemon-driver-secretUpgrade nbdkit-bash-completionUpgrade qemu-system-aarch64-coreUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade libguestfs-rsyncUpgrade swtpmUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-coreUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-javadocUpgrade libnbdUpgrade libvirt-adminUpgrade libvirt-dbusUpgrade virt-v2vUpgrade qemu-guest-agentUpgrade qemu-virtiofsdUpgrade ivshmem-toolsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-develUpgrade nbdkit-tmpdisk-pluginUpgrade qemu-imgUpgrade netcf-libsUpgrade sgabios-binUpgrade libtpmsUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade nbdkit-linuxdisk-pluginUpgrade supermin-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade swtpm-tools-pkcs11Upgrade libguestfs-gobjectUpgrade qemu-kvmUpgrade virt-dibUpgrade hivex-develUpgrade libguestfs-javaUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-example-pluginsUpgrade libguestfs-winsupportUpgrade libnbd-bash-completionUpgrade libvirt-wiresharkUpgrade libvirt-daemon-config-networkUpgrade libvirt-docsUpgrade swtpm-develUpgrade swtpm-libsUpgrade perl-Sys-GuestfsUpgrade nbdkit-serverUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-xfsUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-curlUpgrade qemu-block-glusterUpgrade nbdkit-tar-pluginUpgrade libvirt-bash-completionUpgrade swtpm-toolsUpgrade nbdkit-ssh-pluginUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-basic-filtersUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-gfs2Upgrade sgabiosUpgrade seabiosUpgrade qemu-system-aarch64Upgrade qemu-kvm-commonUpgrade nbdkit-develUpgrade nbdkit-tar-filterUpgrade lua-guestfsUpgrade perl-hivexUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-qemuUpgrade libvirtUpgrade libiscsi-utilsUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-glusterUpgrade nbdkit-curl-pluginUpgrade virt-v2v-bash-completionUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemonUpgrade libguestfs-applianceUpgrade superminUpgrade seavgabios-binUpgrade python3-libguestfsUpgrade nbdkit-xz-filterUpgrade nbdkit-python-pluginUpgrade nbdkit-gzip-pluginUpgrade python3-libnbdUpgrade python3-hivexUpgrade libnbd-develUpgrade hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade ruby-libguestfsUpgrade qemu-kvm-block-rbdUpgrade libguestfs-toolsUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu | May 17, 2023 | Feb 20, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub