CVEvulnerability
CVE-2022-21807
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-427
Description
Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel vtune profiler (< 2022.2.0)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00658.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00658.html Patch, Vendor Advisory