CVE-2022-26843 Security feature bypass in Intel(R) oneAPI DPC++/C++ Compiler
Insufficient visual distinction of homoglyphs in the Intel oneAPI Compiler may allow unauthenticated users to escalate privileges via network access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-26843?
CVE-2022-26843 is a high-severity vulnerability in Intel(R) oneAPI DPC++/C++ Compiler, published on 16 Feb 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R) oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Which versions are affected by CVE-2022-26843?
It affects 1 product.
Products include Intel Oneapi Dpc\+\+\/C\+\+ Compiler.
How do I fix CVE-2022-26843?
No fix has been published for CVE-2022-26843 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-26843 being exploited?
There is no known exploitation of CVE-2022-26843 in the wild and no public exploit code.
Other vulnerabilities in Intel(R) oneAPI DPC++/C++ Compiler
- CVE-2022-40196 Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler and Intel® C++ Compiler Classic for some Intel(R) oneAPI Toolkits
- CVE-2022-38136 Path traversal in Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel® Fortran Compiler for Windows before version 2022.2.1 for some Intel(R) oneAPI Toolkits
Sources
Also known as GHSA-48x2-g4p4-5m93.