Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Product
intel graphics performance analyzer vulnerabilities
8 published CVES affecting intel graphics performance analyzer, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 8
- Critical
- 0
- High
- 7
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest intel graphics performance analyzer CVEs
Newest publication first
-
MediumCVSS 5.4 EPSS 0.14%
-
HighCVSS 7.8 EPSS 0.20%
Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8 EPSS 0.21%
Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8 EPSS 0.21%
Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8 EPSS 0.19%
Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8 EPSS 0.19%
Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8 EPSS 0.18%
Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
HighCVSS 7.8 EPSS 0.39%
Insufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.