CVE-2023-35121

published 2024-02-14

CVE-2023-35121: Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow…

Priority P4 34 high 7.8 CVSS 3.1

AV L AC H PR L UI N S C C H I H A H

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.

Affected

19 ranges

Vendor	Product	Version range	Fixed in
intel	advisor	< 2023.2	2023.2
intel	cluster_checker	—	—
intel	distribution_for_python	—	—
intel	inspector	< 2023.2	2023.2
intel	integrated_performance_primitives	—	—
intel	integrated_performance_primitives_cryptography	< 2021.8	2021.8
intel	mpi_library	< 2021.10	2021.10
intel	oneapi_ai_analytics_toolkit	—	—
intel	oneapi_base_toolkit	< 2023.2	2023.2
intel	oneapi_base_toolkit	—	—
intel	oneapi_deep_neural_network	< 2023.2	2023.2
intel	oneapi_deep_neural_network	—	—
intel	oneapi_hpc_toolkit	—	—
intel	oneapi_iot_toolkit	—	—
intel	oneapi_math_kernel_library	< 2023.2	2023.2
intel	threading_building_blocks	< 2021.10	2021.10
intel	trace_analyzer_and_collector	—	—
intel	vtune_profiler	< 2023.2	2023.2
intel_oneapi_dpc	c++_compiler_software	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284