CVE-2022-21218

CVE-2022-21218 affects Intel® Trace Analyzer and Collector before version 2021.5. An authenticated user may trigger an uncaught exception that could enable information disclosure via local access. The advisory for Intel indicates multiple issues in the same product family; CVSS v3.1 base score fo...

CVE-2022-21156

Summary: CVE-2022-21156 is a vulnerability in Intel® Trace Analyzer and Collector prior to version 2021.5 where an uninitialized pointer can be exploited by an authenticated user with local access to potentially cause a denial of service. This is supported by multiple sources, including NVD (CVSS...

CVE-2022-21226

CVE-2022-21226 concerns an out-of-bounds read in Intel’s Trace Analyzer and Collector prior to version 2021.5, potentially enabling information disclosure for an authenticated user with local access. The linked documents identify the vulnerable component as the Intel® Trace Analyzer and Collector...

CVE-2022-21133

CVE-2022-21133 concerns Intel® Trace Analyzer and Collector before version 2021.5. An authenticated user can trigger an out-of-bounds read, potentially enabling denial of service via local access. The advisory specifies the affected product and version, with a remediation to upgrade to 2021.5 or ...

CVE-2023-29162

The CVE-2023-29162 entry concerns Intel’s Intel® oneAPI Toolkits, specifically the Intel C++ Compiler Classic prior to 2021.8 bundled with toolkits before 2022.3.1. The issue is an improper buffer restriction that may allow a privileged local user to escalate privileges. Affected scope includes I...

CVE-2023-22355

The CVE-2023-22355 issue is an Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers prior to version 4.3.0.251, potentially enabling privilege escalation for an authenticated user via local access. The Intel advisory and related records confirm the affected softwa...

CVE-2023-35121

The CVE-2023-35121 issue concerns improper access control in Intel’s oneAPI DPC++/C++ Compiler prior to 2022.2.1 for some toolkits prior to 2022.3.1, enabling potential privilege escalation via local access when authenticated. Affected software is Intel® oneAPI DPC++/C++ Compiler and related tool...

CVE-2023-27391

CVE-2023-27391 : Improper access control in Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to escalate privileges via local access. This is based on multiple sources (NVD, osv.dev, Red Hat, etc.) referencing the same description. No ...

CVE-2023-28823

CVE-2023-28823 : Uncontrolled search path exists in some Intel(R) oneAPI Toolkit installers and components before version 4.3.1.493. An authenticated user with local access may potentially escalate privileges. This vulnerability is evidenced by multiple connected sources (NVD/NCSC/OSV) referencin...

CVE-2017-5682

CVE-2017-5682 refers to a local privilege escalation in the PSET Application Install wrapper used by multiple Intel developer tools (Intel Parallel Studio XE, System Studio, VTune Amplifier, Inspector, Advisor, MPI Library, Trace Analyzer and Collector, MKL, IPP, DAAL, TBLS, and related cryptogra...

CVE-2024-28172

Intel® Trace Analyzer and Collector software prior to version 2022.1 is affected by an uncontrolled search path vulnerability that may allow an authenticated user to escalate privileges via local access. Intel’s advisory (Intel® SA-01117) states affected products include Intel® Trace Analyzer and...

CVE-2022-32575

Intel® Trace Analyzer and Collector software contains an out-of-bounds write vulnerability (CVE-2022-32575) that affects versions prior to 2021.5. The issue may allow an authenticated user to potentially escalate privileges via local access. Intel advises updating to version 2021.5 or later to mi...

CVE-2022-34843

The set of connected documents confirms CVE-2022-34843 affects Intel(R) Trace Analyzer and Collector software prior to version 2021.5, due to an integer overflow that may allow an authenticated local user to escalate privileges. The Intel advisory and related sources specify update to version 202...

CVE-2022-34864

CVE-2022-34864 describes an out-of-bounds read in Intel’s Trace Analyzer and Collector software prior to version 2021.5 that may allow an authenticated user to escalate privileges via local access. The vulnerability is within Intel Trace Analyzer and Collector (ITAC) before 2021.5, with an impact...

CVE-2022-26062

The CVE-2022-26062 issue affects Intel Trace Analyzer and Collector components of the Intel oneAPI Toolkits prior to version 2021.6 within the HPC Toolkit. The root cause is an uncontrolled search path element that may allow an authenticated user to escalate privileges via local access. Impact is...

CVE-2023-23580

Intel® Trace Analyzer and Collector software is affected by a stack-based buffer overflow in the component prior to version 2021.8.0. The vulnerability could allow an authenticated, locally located user to escalate privileges. Affected product: Intel Trace Analyzer and Collector (pre-2021.8.0). R...

CVE-2022-42878

CVE-2022-42878 affects Intel® Trace Analyzer and Collector software prior to 2021.8.0 (and related Intel HPC Toolkit components). Root cause is a null pointer dereference that could allow an authenticated local user to disclose information. Exploitation details are not provided in the supplied do...

CVE-2023-31197

The CVE-2023-31197 issue is an Uncontrolled search path vulnerability in Intel\u00ae Trace Analyzer and Collector prior to version 2020 update 3 that could allow an authenticated local user to escalate privileges. Affected product: Intel\u00ae Trace Analyzer and Collector before 2020 update 3. Ro...

CVE-2023-23909

CVE-2023-23909 describes an out-of-bounds read in Intel® Trace Analyzer and Collector software prior to version 2021.8.0, which may allow an authenticated attacker with local access to disclose information. The issue affects Intel Trace Analyzer and Collector (and related components) and is mitig...

CVE-2023-23569

CVE-2023-23569 concerns a stack-based buffer overflow in Intel(R) Trace Analyzer and Collector software prior to version 2021.8.0. An authenticated, local attacker could potentially escalate privileges. The issue affects Intel Trace Analyzer and Collector (and is noted by Intel advisory INTEL-SA-...

CVE-2020-24485

CVE-2020-24485 concerns the Intel FPGA OPAE driver for Linux, with root cause described as an improper conditions check in the driver prior to kernel 4.17. The vulnerability can enable privilege escalation by an authenticated, local user. Intel’s advisory INTEL-SA-00440 lists affected drivers and...

CVE-2023-23910

CVE-2023-23910 affects Intel Trace Analyzer and Collector software prior to 2021.8.0. The issue is an out-of-bounds write that may allow an authenticated local user to escalate privileges. The NVD metric shows CVSSv3.1 base score 7.8 (HIGH) with LOCAL attacker, HIGH confidentiality/integrity/avai...