CVE-2023-29162

The CVE-2023-29162 entry concerns Intel’s Intel® oneAPI Toolkits, specifically the Intel C++ Compiler Classic prior to 2021.8 bundled with toolkits before 2022.3.1. The issue is an improper buffer restriction that may allow a privileged local user to escalate privileges. Affected scope includes I...

CVE-2024-21784

CVE-2024-21784 concerns an uncontrolled search path in Intel IPP Cryptography software before version 2021.11, potentially enabling local escalation of privilege for an authenticated user. Intel's advisory (INTEL-SA-01114) notes affected products include Intel IPP Cryptography prior to 2021.11 an...

CVE-2023-35121

The CVE-2023-35121 issue concerns improper access control in Intel’s oneAPI DPC++/C++ Compiler prior to 2022.2.1 for some toolkits prior to 2022.3.1, enabling potential privilege escalation via local access when authenticated. Affected software is Intel® oneAPI DPC++/C++ Compiler and related tool...

CVE-2024-23495

The CVE-2024-23495 entry concerns Intel(R) Distribution for GDB software with an on-disk permission issue: incorrect default permissions in versions before 2024.0.1 may permit an authenticated user to escalate privileges via local access. Affected component: Intel Distribution for GDB (intel-gdb)...

CVE-2024-29015

CVE-2024-29015 describes an Uncontrolled search path vulnerability in Intel VTune Profiler software prior to 2024.1 that may allow an authenticated local user to escalate privileges. Affected products include VTune Profiler before 2024.1 (and related oneAPI/Base Toolkit components). The root caus...

CVE-2024-21772

CVE-2024-21772 describes an uncontrolled search path in Intel�a0Advisor software prior to version 2024.0 that could allow an authenticated user to escalate privileges via local access. Connected sources (Intel advisory and Red Hat/NVD entries) confirm the affected products are Intel�a0Advisor (an...

CVE-2024-28952

CVE-2024-28952 affects Intel IPP for Windows before 2021.12.0 and Intel oneAPI Base Toolkit before 2024.2.0. Root cause: uncontrolled search path in affected components. Impact: may allow an authenticated, local user to escalate privileges (high impact on confidentiality, integrity, and availabil...

CVE-2024-36245

CVE-2024-36245 affects Intel VTune Profiler before 2024.2.0 (and related Intel tooling). The root cause is an uncontrolled search path element, enabling a locally authenticated user to potentially escalate privileges (with HIGH impact on confidentiality, integrity, and availability per CVSS). The...

CVE-2024-24973

CVE-2024-24973 describes improper input validation in Intel® Distribution for GDB prior to 2024.0.1, which may permit an authenticated user to cause a local denial-of-service. The vulnerability affects Intel Distribution for GDB software before 2024.0.1 (and is echoed in related Intel advisories)...

CVE-2024-26025

CVE-2024-26025 concerns Intel® Advisor software prior to version 2024.1, where incorrect default permissions may allow an authenticated user to potentially escalate privileges via local access. The connected Intel advisory and vendor sources confirm affected products (Intel® Advisor software befo...

CVE-2024-28887

The CVE-2024-28887 issue is an Uncontrolled search path vulnerability in Intel® IPP software prior to 2021.11, which could allow an authenticated local user to escalate privileges. Affected products include Intel® IPP and Intel® oneAPI Base Toolkit prior to the specified versions. The Intel advis...

CVE-2024-23491

CVE-2024-23491 refers to an uncontrolled search path in Intel® Distribution for GDB software prior to 2024.0.1, potentially allowing an authenticated user with local access to escalate privileges. Intel’s advisory (INTEL-SA-01075) and related Red Hat/NVD references confirm the affected product: I...

CVE-2024-25562

Intel Distribution for GDB software contains a vulnerability (CVE-2024-25562) due to improper buffer restrictions in versions before 2024.0.1. An authenticated user could potentially cause a denial of service via local access. The issue affects Intel Distribution for GDB prior to 2024.0.1, and In...

CVE-2024-37027

Intel VTune Profiler before 2024.2.0 contains an improper input validation vulnerability (CVE-2024-37027) that may allow an authenticated local user to cause a denial of service. The issue is part of a broader set of vulnerabilities in the Intel oneAPI Base Toolkit and related components, with af...