CVE-2023-28823

—

CVSS 3.1

7.3 high

EPSS

<1%p7

Published

Aug 11, 2023 (Aug 11, 2023)

Modified

Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vendors: intel
Products: advisor for oneapi, cpu runtime for opencl applications, distribution for python programming language, dpc\+\+ compatibility tool, embree ray tracing kernel library, fortran compiler, implicit spmd program compiler, inspector for oneapi, integrated performance primitives, ipp cryptography, mpi library, oneapi base toolkit
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.