CVE-2022-40196 Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler and Intel® C++ Compiler Classic for some Intel(R) oneAPI Toolkits
An authenticated local user can escalate privileges due to improper access control in Intel oneAPI and C++ Compilers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-40196?
CVE-2022-40196 is a high-severity vulnerability in Intel(R) oneAPI DPC++/C++ Compiler and Intel® C++ Compiler Classic for some Intel(R) oneAPI Toolkits, published on 6 Feb 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Which versions are affected by CVE-2022-40196?
It affects 1 product.
Products include Intel Oneapi Dpc\+\+\/C\+\+ Compiler.
How do I fix CVE-2022-40196?
No fix has been published for CVE-2022-40196 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-40196 being exploited?
There is no known exploitation of CVE-2022-40196 in the wild and no public exploit code.
Other vulnerabilities in Intel(R) oneAPI DPC++/C++ Compiler and Intel® C++ Compiler Classic for some Intel(R) oneAPI Toolkits
Sources
Also known as GHSA-c6gw-cqpw-xppr.