Intel oneAPI DPC++/C++ Compiler 代码问题漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2025.0.1, which stems from an uncontrolled search path that could lead to elevated privileges...

Intel Trace Analyzer And Collector 代码问题漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel Corporation USA. It is used to analyze Mpi behavior in parallel applications. A code issue vulnerability exists in Intel Trace Analyzer And Collector that stems from an uncontrolled search path that could lead to...

Intel oneAPI Toolkits 代码问题漏洞

Intel oneAPI Toolkits is a set of core tools and libraries from Intel Corporation USA. It is used to develop high-performance, data-centric applications across different architectures. A code issue vulnerability exists in Intel oneAPI Toolkits that stems from an uncontrolled search path that coul...

Intel Driver & Support Assistant Tool 代码问题漏洞

Intel Driver & Support Assistant Tool is a software program from Intel Corporation USA that is used to automatically detect, download and install drivers. A code issue vulnerability exists in Intel Driver & Support Assistant Tool versions prior to 24.6.49.8, which stems from an uncontrolled searc...

PT-2025-32900 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler is affected by an uncontrolled search path element issue that may lead to arbitrary code execution with current user privileges. An attacker could manipulate...

Intel® AI for Enterprise Retrieval-augmented Generation Software Advisory

Summary: A potential security vulnerability in some Intel® AI for Enterprise Retrieval-augmented Generation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24923 Description:...

Intel® DSA Software Advisory

Summary: A potential security vulnerability in some Intel® Driver & Support Assistant DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-26404 Description: Uncontrolled search path fo...

Clock Jitter Tool Software Advisory

Summary: A potential security vulnerability for some Clock Jitter Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20092 Description: Uncontrolled search path for some Clock Jitter...

PT-2025-32755 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver software affected versions not specified Description: An uncontrolled search path in some IntelR Graphics Driver software may allow an authenticated user to potentially escalate privileges via local access...

Intel RealSense Dynamic Calibrator 代码问题漏洞

Intel RealSense Dynamic Calibrator is a software for optimizing and fine-tuning the depth and image quality of a camera from Intel Corporation USA. A code issue vulnerability exists in Intel RealSense Dynamic Calibrator versions prior to 2.14.2.0, which stems from an uncontrolled search path that...

PT-2025-32708 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler versions prior to 2025.0.1 Description: An uncontrolled search path issue exists in some IntelR oneAPI DPC++/C++ Compiler software. This may allow an authenticated user to potentially escalate privileges via...

PT-2025-32745 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 25.2.15.9 Description: An uncontrolled search path exists in some IntelR DSA software. This may allow an authenticated user to potentially escalate privileges via local access. Recommendations: Update to...

PT-2025-32703 · Unknown · Clock Jitter Tool

Name of the Vulnerable Software and Affected Versions: Clock Jitter Tool versions prior to 6.0.1 Description: An uncontrolled search path issue exists in some Clock Jitter Tool software. This issue may allow an authenticated user to potentially escalate privileges via local access. Recommendation...

PT-2025-32711 · Intel · Intel(R) Driver & Support Assistant Tool

Name of the Vulnerable Software and Affected Versions: IntelR Driver & Support Assistant Tool versions prior to 24.6.49.8 Description: An uncontrolled search path element in the IntelR Driver & Support Assistant Tool software may allow an authenticated user to potentially escalate privileges via...

Intel DSA 代码问题漏洞

Intel DSA is a hardware gas pedal built into Intel® Xeon® Scalable processors that accelerates storage, networking, and data analytics workloads by offloading data transfer tasks to dedicated hardware, freeing up CPU resources for other tasks. Intel DSA suffers from an uncontrolled search path...

Adobe Substance3D Modeler 代码问题漏洞

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. Adobe Substance3D Modeler suffe...

PT-2025-32692 · Intel · Intel Oneapi Toolkit

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Toolkit and component software affected versions not specified Description: An uncontrolled search path exists in some IntelR oneAPI Toolkit and component software installers. This may allow an authenticated user to potentially...

PT-2025-32696 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector software affected versions not specified Description: An uncontrolled search path issue exists in the IntelR Trace Analyzer and Collector software. This may allow an authenticated user to potentially escala...

CVE-2025-25011

CVE-2025-25011 affects Elastic Beats (notably Filebeat) installed via Windows, where the Windows install script can trigger an Uncontrolled Search Path Element leading to Local Privilege Escalation through insecure directory permissions. Affected versions include Beats prior to 9.1.0 (with mainte...

CVE-2025-25011 Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files,...