Intel Parallel Studio XE vulnerabilities

3 CVEs affecting Intel Parallel Studio XE, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3704, published 2018-12-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5682, published 2017-02-28. High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days. Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector,…
• CVE-2018-12174, published 2018-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access.
• CVE-2018-3704, published 2018-12-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access.