CVE-2022-32576 Privilege escalation in Intel(R) Unite(R) Plugin SDK

What is CVE-2022-32576?

CVE-2022-32576 is a medium-severity vulnerability in Intel(R) Unite(R) Plugin SDK, published on 10 May 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness: CWE-427

Which versions are affected by CVE-2022-32576?

It affects 1 product.

Products include Intel Unite.

How do I fix CVE-2022-32576?

No fix has been published for CVE-2022-32576 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-32576 being exploited?

There is no known exploitation of CVE-2022-32576 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) Unite(R) Plugin SDK

• CVE-2019-0172 Privilege escalation in Intel Unite(R) Client for Android Critical 9.8
• CVE-2019-0101 Auth bypass in n/a Critical 9.8
• CVE-2017-5738 Information disclosure in Unite App Critical 9.1
• CVE-2021-0098 Privilege escalation in Intel Unite(R) Client for Windows High 7.8
• CVE-2021-0102 Privilege escalation in Intel Unite(R) Client for Windows High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6xhf-wfx5-w55p.