CVE-2025-20050

Intel CIP software prior to WIN_DCA_2.4.0.11001 is affected by an Uncontrolled search path issue in Ring 3 User Applications that can lead to privilege escalation and local code execution. The vulnerability arises from improper/unsafe path handling, enabling an unprivileged, authenticated user wi...

CVE-2025-20050

Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

CVE-2025-20050

Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from improper external control of filenames or paths, and no details of the vulnerability are...

PT-2025-46379

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An uncontrolled search path exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an escalation of privilege. A local,...

PT-2025-46398

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An improper privilege management issue exists in some IntelR CIP software. This may allow an information disclosure within Ring 3 User Applications. An unprivileged software...

Intel CIP 输入验证错误漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an input validation error vulnerability that stems from improper input validation, which can be exploited by an attacker to cause information...

PT-2025-46392

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A protection mechanism failure exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an information disclosure. An unprivilege...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from improper privilege management and can be exploited by an attacker to cause elevation of...

PT-2025-46397

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combin...

PT-2025-46393

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains an improper privilege management issue within Ring 3 User Applications. An unprivileged software adversary with an authenticated user and a low...

PT-2025-46385

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A flaw exists in privilege management within some IntelR CIP software. This issue, present in Ring 3 User Applications, could allow an unprivileged software adversary with a...

EUVD-2023-47904

Malicious code in bioql PyPI...

EUVD-2023-39768

Malicious code in bioql PyPI...

CVE-2023-35769

Uncontrolled search path in some IntelR CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...