CVE-2023-28823: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to…

PriorityP430high7.3CVSS 3.1

AVLACLPRLUIRSUCHIHAH

EPSS

0.15%

5.0th percentile

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

29 ranges· showing 25

Vendor	Product	Version range	Fixed in
intel	advisor_for_oneapi	< 2023.1	2023.1
intel	cpu_runtime_for_opencl_applications	< 2023.1	2023.1
intel	distribution_for_python_programming_language	< 2023.1	2023.1
intel	dpc_+_+_compatibility_tool	< 2023.1	2023.1
intel	embree_ray_tracing_kernel_library	< 2023.1	2023.1
intel	fortran_compiler	< 2023.1	2023.1
intel	implicit_spmd_program_compiler	< 1.19.1	1.19.1
intel	inspector_for_oneapi	< 2023.1	2023.1
intel	integrated_performance_primitives	< 2021.8	2021.8
intel	ipp_cryptography	< 2021.7.0	2021.7.0
intel	mpi_library	< 2021.9.0	2021.9.0
intel	oneapi_base_toolkit	< 2023.1	2023.1
intel	oneapi_data_analytics_library	< 2023.1	2023.1
intel	oneapi_deep_neural_network_library	< 2023.1	2023.1
intel	oneapi_dpc_+_+_c_+_+_compiler	< 2023.1	2023.1
intel	oneapi_dpc_+_+_library	< 2022.1	2022.1
intel	oneapi_hpc_toolkit	< 2023.1	2023.1
intel	oneapi_iot_toolkit	< 2023.1	2023.1
intel	oneapi_math_kernel_library	< 2023.1	2023.1
intel	oneapi_rendering_toolkit	< 2023.1	2023.1
intel	oneapi_threading_building_blocks	< 2021.9.0	2021.9.0
intel	oneapi_toolkit_and_component_software_installer	< 4.3.1.493	4.3.1.493
intel	oneapi_video_processing_library	< 2023.1	2023.1
intel	open_image_denoise	< 1.4.3	1.4.3
intel	open_volume_kernel_library	< 2023.1	2023.1

CVSS provenance

nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

vendor_oracle7.3MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.