CVE-2022-26421
MEDIUMIntel Oneapi Dpc++/c++ Compiler Runtime < 2022.0 - Uncontrolled Search Path
Title source: ruleDescription
Uncontrolled search path element in the Intel(R) oneAPI DPC++/C++ Compiler Runtime before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Scores
CVSS v3
6.7
EPSS
0.0015
EPSS Percentile
35.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
intel/oneapi_dpc\+\+\/c\+\+_compiler_runtime
< 2022.0
Timeline
Published
Feb 16, 2023
Tracked Since
Feb 18, 2026