CVE-2023-22355: Intel Advisor

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

  • Intel Advisor: before 2023.0 (fixed in 2023.0)
  • Intel CPU Runtime: before 2023.0 (fixed in 2023.0)
  • Intel Distribution For Python: before 2023.0 (fixed in 2023.0)
  • Intel Dpc++ Compatibility Tool: before 2023.0 (fixed in 2023.0)
  • Intel Embree Ray Tracing Kernel Library: before 2023.0 (fixed in 2023.0)
  • Intel Fortran Compiler: before 2023.0 (fixed in 2023.0)
  • Intel Implicit Spmd Program Compiler: before 1.18.1 (fixed in 1.18.1)
  • Intel Inspector: before 2023.0 (fixed in 2023.0)
  • Intel Integrated Performance Primitives: before 2021.7 (fixed in 2021.7)
  • Intel Integrated Performance Primitives Cryptography: before 2021.6.3 (fixed in 2021.6.3)
  • Intel Mpi Library: before 2021.8 (fixed in 2021.8)
  • Intel Oneapi Base Toolkit: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Data Analytics Library: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Deep Neural Network Library: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Dpc++/c++ Compiler: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Dpc++ Library: before 2022.0 (fixed in 2022.0)
  • Intel Oneapi Hpc Toolkit: before 2023.0.0 (fixed in 2023.0.0); version 2023.0.0 only
  • Intel Oneapi IoT Toolkit: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Math Kernel Library: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Rendering Toolkit: before 2023.0 (fixed in 2023.0)
  • Intel Oneapi Threading Building Blocks: before 2021.8 (fixed in 2021.8)
  • Intel Oneapi Toolkit And Component Software Installers: before 4.3.0.251 (fixed in 4.3.0.251)
  • Intel Oneapi Video Processing Library: before 2023.0 (fixed in 2023.0)
  • Intel Open Image Denoise: before 1.4.3 (fixed in 1.4.3)
  • Intel Open Volume Kernel Library: before 2023.0 (fixed in 2023.0)
  • and 4 more

Published 2023-05-10. Last modified 2026-06-17.