CVE-2023-22355

published 2023-05-10

CVE-2023-22355: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to…

Priority P3 35 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

30 ranges · showing 25

Vendor	Product	Version range	Fixed in
intel	advisor	< 2023.0	2023.0
intel	cpu_runtime	< 2023.0	2023.0
intel	distribution_for_python	< 2023.0	2023.0
intel	dpc_+_+_compatibility_tool	< 2023.0	2023.0
intel	embree_ray_tracing_kernel_library	< 2023.0	2023.0
intel	fortran_compiler	< 2023.0	2023.0
intel	implicit_spmd_program_compiler	< 1.18.1	1.18.1
intel	inspector	< 2023.0	2023.0
intel	integrated_performance_primitives	< 2021.7	2021.7
intel	integrated_performance_primitives_cryptography	< 2021.6.3	2021.6.3
intel	mpi_library	< 2021.8	2021.8
intel	oneapi_base_toolkit	< 2023.0	2023.0
intel	oneapi_data_analytics_library	< 2023.0	2023.0
intel	oneapi_deep_neural_network_library	< 2023.0	2023.0
intel	oneapi_dpc_+_+_c_+_+_compiler	< 2023.0	2023.0
intel	oneapi_dpc_+_+_library	< 2022.0	2022.0
intel	oneapi_hpc_toolkit	< 2023.0.0	2023.0.0
intel	oneapi_hpc_toolkit	—	—
intel	oneapi_iot_toolkit	< 2023.0	2023.0
intel	oneapi_math_kernel_library	< 2023.0	2023.0
intel	oneapi_rendering_toolkit	< 2023.0	2023.0
intel	oneapi_threading_building_blocks	< 2021.8	2021.8
intel	oneapi_toolkit_and_component_software_installers	< 4.3.0.251	4.3.0.251
intel	oneapi_video_processing_library	< 2023.0	2023.0
intel	open_image_denoise	< 1.4.3	1.4.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-427