{"id":"CVE-2022-26062","aliases":["EUVD-2022-30630","GHSA-p5jg-q7fm-8xfq"],"status":"published","title":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021...","description":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00182,"percentile":0.07817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2023-02-16T19:59:46Z","modified":"2026-06-17T04:34:37Z","products":[{"vendor":"intel","product":"trace_analyzer_and_collector"}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26062"},{"url":"https://github.com/advisories/GHSA-p5jg-q7fm-8xfq"}],"sources":{"cve":[{"id":"CVE-2022-26062","description":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2023-02-16T19:59:46.697Z","modified":"2025-01-27T18:24:51.377Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:25.954329Z"}],"euvd":[{"id":"EUVD-2022-30630","description":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2023-02-16T19:59:46Z","modified":"2025-01-27T18:24:51Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:12.238707Z"}],"ghsa":[{"id":"GHSA-p5jg-q7fm-8xfq","title":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021...","description":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2023-02-16T21:30:27Z","modified":"2023-03-08T05:05:44Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:54:17.182344Z"}],"nvd":[{"id":"CVE-2022-26062","description":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2023-02-16T20:15:12.797Z","modified":"2026-06-17T04:34:37.513Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:07:36.601381Z"}]}}