7.3
High
CVE-2022-34405 An improper access control vulnerability was identified in the Realtek audio driver
Description
An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG Drivers 6.0 | earliest → < 6.0.9433.1 | 6.0.9433.1 |
| CPG Drivers 1.37 | earliest → < 1.37.275.0 | 1.37.275.0 |