Back
CVE-2018-3635
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to…
High7.8EPSS 0.38%
- Published
- Updated
- Reserved
- Assigned by
- intel
Description
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.38% · top 67% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
- Escalation of Privilege, Denial of Service
- CWE-269 (opens in a new tab)All about CWE-269 and its CVEs
Affected products
Intel Corporation · Intel Rapid Store Technology
- affected versions before 16.7
References (3)
- 105984 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20210323 CVE-2018-3635 revisited: executable installers are vulnerable^WEVIL (case 60): again arbitrary code execution WITH escalation of privilege via Intel Rapid Storage Technology User Interface and Driver (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2018-3635)Record last updated .