SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-26585

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.

MEDIUM 5.0EPSS 0.18%

Does this matter?

Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.

Description

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1
5.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
EPSS
0.18% probability · 7th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-284
Affected
intel/thunderbolt dch driver
Source
secure@intel.com
EPSS trend
0%3%5%8 October 2026: 0.18%8 October 20268 October 2026

EPSS 0.2% since 8 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.