CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043

Claimed vulnerability: CVE-2025-20043 concerns an uncontrolled search path in Intel RealSense SDK software prior to version 2.56.2. The underlying issue may enable escalation of privilege via local access for an authenticated user. Affected software/versions: Intel RealSense SDKs before 2.56.2. I...

Intel RealSense SDK 安全漏洞

Intel RealSense SDK is a depth perception camera development kit from Intel Corporation USA that supports 3D vision application development. A security vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improper default permissions and may result in elevated...

Intel RealSense SDK 代码问题漏洞

Intel RealSense SDK is a depth-aware camera development kit from Intel Corporation USA that supports 3D vision application development. A code issue vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improperly controlled search paths and could lead to elevatio...

PT-2025-21080 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSense™ SDK versions prior to 2.56.2 Description: The issue concerns an uncontrolled search path in some IntelR RealSense™ SDK software, which may allow an authenticated user to potentially enable escalation of privilege via local...

Intel® RealSense™ SDK Software Advisory

Summary: Potential security vulnerabilities for some Intel® RealSense™ SDK software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20095 Description: Incorrect Default Permissions for some...

CVE-2024-41953 Zitadel improperly sanitizes HTML in emails and Console UI

Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such as usernames dynamically. That information can be entered by users or administrators. Due to a missing output sanitization, these emails could include malicious code. This may...

CVE-2024-41952 Zitadel has an "Ignoring unknown usernames" vulnerability

Zitadel is an open source identity management system. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report...