{"id":"CVE-2023-22355","details":"Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.","modified":"2026-08-27T03:57:01.175503637Z","published":"2023-05-10T14:15:27.240Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"intel:advisor","cpes":["cpe:2.3:a:intel:advisor:*:*:*:*:*:oneapi:*:*"],"extracted_events":[{"fixed":"2023.0"}]},{"vendor_product":"intel:cpu_runtime","cpes":["cpe:2.3:a:intel:cpu_runtime:*:*:*:*:*:opencl:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE"},{"vendor_product":"intel:distribution_for_python","cpes":["cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:intel:dpc\\+\\+_compatibility_tool:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:dpc++_compatibility_tool"},{"vendor_product":"intel:embree_ray_tracing_kernel_library","cpes":["cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:fortran_compiler"},{"vendor_product":"intel:inspector","cpes":["cpe:2.3:a:intel:inspector:*:*:*:*:*:oneapi:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE"},{"vendor_product":"intel:integrated_performance_primitives","cpes":["cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2021.7"}],"source":"CPE_RANGE"},{"extracted_events":[{"fixed":"2021.6.3"}],"source":"CPE_RANGE","vendor_product":"intel:integrated_performance_primitives_cryptography","cpes":["cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"fixed":"2021.8"}],"source":"CPE_RANGE","vendor_product":"intel:mpi_library","cpes":["cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_base_toolkit"},{"source":"CPE_RANGE","vendor_product":"intel:oneapi_data_analytics_library","cpes":["cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}]},{"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_deep_neural_network_library","cpes":["cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"intel:oneapi_dpc++/c++_compiler","cpes":["cpe:2.3:a:intel:oneapi_dpc\\+\\+\\/c\\+\\+_compiler:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}]},{"source":"CPE_RANGE","vendor_product":"intel:oneapi_dpc++_library","cpes":["cpe:2.3:a:intel:oneapi_dpc\\+\\+_library:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2022.0"}]},{"cpes":["cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0.0"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_hpc_toolkit"},{"cpes":["cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_iot_toolkit"},{"cpes":["cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_math_kernel_library"},{"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_rendering_toolkit","cpes":["cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"fixed":"2021.8"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_threading_building_blocks","cpes":["cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installers:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"4.3.0.251"}],"source":"CPE_RANGE","vendor_product":"intel:oneapi_toolkit_and_component_software_installers"},{"vendor_product":"intel:oneapi_video_processing_library","cpes":["cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE"},{"extracted_events":[{"fixed":"1.4.3"}],"source":"CPE_RANGE","vendor_product":"intel:open_image_denoise","cpes":["cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"intel:open_volume_kernel_library","cpes":["cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}]},{"cpes":["cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:ospray"},{"cpes":["cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE","vendor_product":"intel:ospray_studio"},{"vendor_product":"intel:trace_analyzer_and_collector","cpes":["cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2021.8.0"}],"source":"CPE_RANGE"},{"vendor_product":"intel:vtune_profiler","cpes":["cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2023.0"}],"source":"CPE_RANGE"},{"source":"CPE_STRING","vendor_product":"intel:oneapi_hpc_toolkit","cpes":["cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2023.0.0"},{"last_affected":"2023.0.0"}]}]},"references":[{"type":"ADVISORY","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ispc/ispc","events":[{"introduced":"0"},{"fixed":"222aa0a8628965f2ce5c53e922a7334be75f8c9b"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.18.1"}]}}],"versions":["v1.18.0","v1.17.0","v1.16.0","v1.15.0","v1.14.1","v1.14.0","v1.13.0","v1.12.0","v1.11.0","v1.10.0","v1.9.2","v1.9.1","v1.9.0","v1.8.2","v1.8.1","v1.7.0","v1.6.0","v1.3.1","v1.3.0","v1.2.2","v1.2.1","v1.1.4","v1.1.3","v1.1.2","v1.1.1","v1.1.0","v1.0.12","v1.0.11","v1.0.9","v1.0.8","v1.0.7","v1.0.6","v1.0.5","v1.0.4","v1.0.3","v1.0.2","v1.0.1","v1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22355.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}