CVE Feed

    Dashboard / CVE / CVE-2022-34405

    CVE-2022-34405

    An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system.

    Published:Jan 25, 2023
    Last Modified:Mar 28, 2025
    EPS:Jan 25, 2023
    EPSS Score:0.00068
    CVSS Score:7.3

    Affected Products

    Vendor
    Dell
    Product
    Alienware Area 51m R1
    Vendor
    Dell
    Product
    Alienware Area 51m R2
    Vendor
    Dell
    Product
    Alienware Aurora R10
    Vendor
    Dell
    Product
    Alienware Aurora R11
    Vendor
    Dell
    Product
    Alienware Aurora R12
    Vendor
    Dell
    Product
    Alienware Aurora R13
    Vendor
    Dell
    Product
    Alienware Aurora R8
    Vendor
    Dell
    Product
    Alienware Aurora R9
    Vendor
    Dell
    Product
    Alienware M15 R1
    Vendor
    Dell
    Product
    Alienware M15 R2
    Vendor
    Dell
    Product
    Alienware M15 R3
    Vendor
    Dell
    Product
    Alienware M15 R4
    Vendor
    Dell
    Product
    Alienware M15 R6
    Vendor
    Dell
    Product
    Alienware M15 Ryzen Edition R5
    Vendor
    Dell
    Product
    Alienware M17 R1
    Vendor
    Dell
    Product
    Alienware M17 R2
    Vendor
    Dell
    Product
    Alienware M17 R3
    Vendor
    Dell
    Product
    Alienware M17 R4
    Vendor
    Dell
    Product
    Alienware X15 R1
    Vendor
    Dell
    Product
    Alienware X17 R1
    Vendor
    Dell
    Product
    G15 5510
    Vendor
    Dell
    Product
    G15 5511
    Vendor
    Dell
    Product
    G15 5515
    Vendor
    Dell
    Product
    G3 3500
    Vendor
    Dell
    Product
    G3 3590
    Vendor
    Dell
    Product
    G5 5000
    Vendor
    Dell
    Product
    G5 5090
    Vendor
    Dell
    Product
    G5 5500
    Vendor
    Dell
    Product
    G5 5590
    Vendor
    Dell
    Product
    G7 7500
    Vendor
    Dell
    Product
    G7 7590
    Vendor
    Dell
    Product
    G7 7700
    Vendor
    Dell
    Product
    G7 7790
    Vendor
    Dell
    Product
    Realtek High Definition Audio Driver

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-285 Improper Authorization

    Related CVEs

    CVE-2023-28058 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28050 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28026 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28044 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28060 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-25938 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28031 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28034 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28027 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28036 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High