CVE-2023-0664
Fixed in a distro release EPSS <1%CVSS 7.8
A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.
Products: qemu, redhat enterprise_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 9 | virtio-win | 0:1.9.33-0.el9_2 |