A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Mar 29, 2023 |
| Oracle_linux | — | Upgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbdUpgrade nbdkit-serverUpgrade libguestfs-xfsUpgrade netcf-develUpgrade qemu-block-glusterUpgrade nbdkit-tar-pluginUpgrade swtpm-libsUpgrade libnbd-develUpgrade nbdkit-gzip-pluginUpgrade libguestfs-toolsUpgrade qemu-commonUpgrade libguestfs-applianceUpgrade libguestfs-bash-completionUpgrade hivexUpgrade qemuUpgrade libguestfs-gfs2Upgrade perl-Sys-GuestfsUpgrade qemu-kvm-commonUpgrade seabiosUpgrade qemu-block-rbdUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-system-aarch64Upgrade libguestfs-inspect-iconsUpgrade python3-libguestfsUpgrade qemu-kvm-block-sshUpgrade virt-v2v-bash-completionUpgrade libiscsi-utilsUpgrade superminUpgrade libvirtUpgrade perl-hivexUpgrade libvirt-libsUpgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-python-pluginUpgrade nbdkit-tar-filterUpgrade nbdkit-develUpgrade python3-hivexUpgrade libvirt-daemonUpgrade seavgabios-binUpgrade lua-guestfsUpgrade python3-libnbdUpgrade swtpm-develUpgrade sgabiosUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-networkUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-ssh-pluginUpgrade swtpm-toolsUpgrade libvirt-bash-completionUpgrade libvirt-lock-sanlockUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade ivshmem-toolsUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcfUpgrade libnbdUpgrade libguestfs-benchmarkingUpgrade libguestfs-winsupportUpgrade libguestfs-gobjectUpgrade virt-dibUpgrade libvirt-docsUpgrade libvirt-daemon-config-networkUpgrade sgabios-binUpgrade netcf-libsUpgrade libnbd-bash-completionUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-wiresharkUpgrade nbdkit-example-pluginsUpgrade supermin-develUpgrade libguestfsUpgrade seabios-binUpgrade nbdfuseUpgrade qemu-system-x86Upgrade nbdkitUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade hivex-develUpgrade qemu-system-x86-coreUpgrade libguestfs-javaUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libtpmsUpgrade virt-v2v-man-pages-ukUpgrade ruby-hivexUpgrade qemu-kvm-block-iscsiUpgrade python3-libvirtUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-secretUpgrade libtpms-develUpgrade libiscsi-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-develUpgrade virt-v2vUpgrade libvirt-adminUpgrade libguestfs-javadocUpgrade swtpmUpgrade libvirt-dbusUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-tools-cUpgrade swtpm-tools-pkcs11Upgrade nbdkit-bash-completionUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-VirtUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade qemu-system-aarch64-coreUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-kvm | May 17, 2023 | Feb 20, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub