VULNERABILITY INTELLIGENCE

CVE-2023-22355

CVSS score6.7 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2023-05-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness classification

  • secure@intel.com: CWE-427
  • nvd@nist.gov: CWE-427

Primary references