Uncontrolled Search Path in PresentMon Software by Intel
CVE-2022-26086

7.3HIGH

Key Information:

Vendor

Intel
Status
Presentmon Software Maintained By Intel(r)
Vendor
CVE Published:
11 November 2022

What is CVE-2022-26086?

An uncontrolled search path vulnerability exists in Intel's PresentMon software prior to version 1.7.1. This flaw could allow an authenticated user to manipulate the path used by the software, potentially resulting in local privilege escalation. Users are urged to upgrade to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

PresentMon software maintained by Intel(R) before version 1.7.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.