CVE-2023-28823

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Aug 11, 2023
Updated: Nov 7, 2023
CWE ID 427

Summary

CVE-2023-28823 is a vulnerability affecting some versions of Intel(R) oneAPI Toolkit and component software installers prior to 4.3.1.493. An authenticated user can exploit an uncontrolled search path during installation, potentially enabling privilege escalation through local access. This issue could lead to significant security risks if not addressed promptly. Intel strongly advises users to update to the latest version of the software to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Intel Integrated Performance Primitives

Affected Vendors

  • Intel Corp.