Escalation of Privilege in Intel Quartus Prime Software
CVE-2022-26840

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Quartus Prime Pro And Standard Edition Software
Vendor
CVE Published:
16 February 2023

What is CVE-2022-26840?

The Intel Quartus Prime software, encompassing both Pro and Standard editions, contains an improper neutralization vulnerability that could be exploited by an authenticated user. This flaw allows for potential escalation of privilege through local access, enabling unauthorized actions within the software environment.

Affected Version(s)

Intel(R) Quartus Prime Pro and Standard edition software See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.