Escalation of Privilege Vulnerability in Intel VTune Profiler
CVE-2022-26028

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Vtune(tm) Profiler Software
Vendor
CVE Published:
11 November 2022

What is CVE-2022-26028?

An uncontrolled search path vulnerability in Intel VTune Profiler prior to version 2022.2.0 allows an authenticated user to escalate privileges via local access, potentially compromising system integrity. This vulnerability could be exploited to execute unauthorized actions within the software, underlining the necessity for timely updates and adherence to best security practices.

Affected Version(s)

Intel(R) VTune(TM) Profiler software before version 2022.2.0

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.