{"id":"CVE-2018-3635","aliases":["EUVD-2018-15489","GHSA-54h3-2qjf-7vmr"],"status":"published","title":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version...","description":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00383,"percentile":0.3263,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2018-11-14T14:00:00Z","modified":"2026-06-17T01:57:35Z","products":[{"vendor":"intel","product":"rapid_storage_technology"},{"vendor":"intel corporation","product":"intel rapid store technology"}],"references":[{"url":"http://www.securityfocus.com/bid/105984","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Mar/55","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3635"},{"url":"https://github.com/advisories/GHSA-54h3-2qjf-7vmr"}],"sources":{"cve":[{"id":"CVE-2018-3635","description":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.","status":"published","published":"2018-11-14T14:00:00Z","modified":"2024-08-05T04:50:30.367Z","updated_at":"2026-11-02T14:35:05.619113Z"}],"euvd":[{"id":"EUVD-2018-15489","description":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.","status":"published","published":"2018-11-14T14:00:00Z","modified":"2024-08-05T04:50:30Z","updated_at":"2026-11-03T02:40:15.208866Z"}],"ghsa":[{"id":"GHSA-54h3-2qjf-7vmr","title":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version...","description":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.","status":"published","published":"2022-05-13T01:11:20Z","modified":"2023-02-01T05:03:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:50:05.01868Z"}],"nvd":[{"id":"CVE-2018-3635","description":"Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.","status":"published","published":"2018-11-14T14:29:00.347Z","modified":"2026-06-17T01:57:35.617Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:04:47.196456Z"}]}}