CVE-2022-34405 - CVE House
Back to Database
Status published High CVE-2022-34405

An improper access control vulnerability was identified in the Realtek...

Vulnerability Description

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-34405

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

CPG Drivers
Vulnerable Versions:
6.0.9433.1, 6.0.9400.1, 6.0.9394.1, 1.37.275.0, 6.0.9407.1, 6.0.9388.1, 6.0.9254.1, 6.0.9422.1

Timeline

Official Publish: January 25th, 2023
Last Modified: March 28th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)