QP
Product
Quartus Prime
43
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 28Medium 15Low 0
Watch
Add Quartus Prime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38668 | 7.8 | Nov 13 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable… Affected: before 23.1.1 |
| CVE-2024-38383 | 7.8 | Nov 13 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation… Affected: before 24.2 |
| CVE-2024-23907 | 7.8 | Aug 14 | Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege… Affected: before 23.4 |
| CVE-2024-22184 | 7.8 | Aug 14 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of… Affected: before 24.1 |
| CVE-2022-41693 | 7.8 | May 10 | Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege… Affected: before 22.3 |
| CVE-2022-34157 | 7.8 | Feb 16 | Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially… Affected: before 21.1; before 21.3 |
| CVE-2022-33902 | 7.8 | Feb 16 | Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege… Affected: before 22.1; before 22.2 |
| CVE-2022-33892 | 7.8 | Feb 16 | Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access Affected: before 22.1; before 22.2 |
| CVE-2022-32570 | 7.8 | Feb 16 | Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local… Affected: before 22.1; before 22.2 |
| CVE-2022-26840 | 7.8 | Feb 16 | Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local… Affected: before 22.1; before 22.2 |
| CVE-2022-27187 | 7.8 | Nov 11 | Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable… Affected: through 21.1 |
| CVE-2022-21220 | 7.8 | Feb 9 | Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of… Affected: before 21.3 |
| CVE-2022-21204 | 7.8 | Feb 9 | Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access Affected: before 21.3 |
| CVE-2022-21203 | 7.8 | Feb 9 | Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable… Affected: before 21.1 |
| CVE-2022-21174 | 7.8 | Feb 9 | Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of… Affected: before 21.3 |
| CVE-2021-44454 | 7.8 | Feb 9 | Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation… Affected: before 21.3 |
| CVE-2019-14603 | 7.8 | Dec 16 | Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially… Affected: before 19.3 |
| CVE-2019-0171 | 7.8 | May 17 | Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access Affected: 15.1 through 18.1 |
| CVE-2018-3683 | 7.8 | Jul 10 | Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code Affected: 15.1 through 18.0 |
| CVE-2022-27233 | 7.5 | Nov 11 | XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable… Affected: through 21.1; before 22.1 |
| CVE-2022-21205 | 7.5 | Feb 9 | Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to… Affected: before 21.3 |
| CVE-2020-24454 | 7.5 | Nov 12 | Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition… Affected: through 20.1; before 20.3 |
| CVE-2024-21862 | 7.3 | May 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of… Affected: before 23.1 |
| CVE-2024-21837 | 7.3 | May 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of… Affected: before 23.1 |
| CVE-2024-21809 | 7.3 | May 16 | Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of… Affected: before 23.1 |
| CVE-2024-21777 | 7.3 | May 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of… Affected: before 23.4 |
| CVE-2023-24016 | 7.3 | Aug 11 | Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of… Affected: before 22.1std; before 22.4 |
| CVE-2022-37329 | 7.3 | Feb 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via… Affected: before 21.1; before 21.3 |
| CVE-2020-8737 | 6.8 | Nov 12 | Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated… Affected: before 20.1 |
| CVE-2025-14625 | 6.7 | Jan 7 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command… Affected: 19.1 before 25.1; 19.1 before 25.1 |
| CVE-2025-14614 | 6.7 | Jan 7 | Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Explore for… Affected: 23.1 before 25.1; 23.1 before 25.1 |
| CVE-2025-14612 | 6.7 | Jan 7 | Insecure Temporary File vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from… Affected: 24.1 before 25.3 |
| CVE-2025-14605 | 6.7 | Jan 7 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects Quartus Prime Pro:… Affected: 17.0 before 25.1.1 |
| CVE-2025-14599 | 6.7 | Jan 7 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows… Affected: 23.1 before 25.1; 23.1 before 25.1 |
| CVE-2025-14596 | 6.7 | Jan 7 | Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from… Affected: 24.1 before 25.1 |
| CVE-2025-13665 | 6.7 | Dec 12 | The System Console Utility for Windows is vulnerable to a DLL planting vulnerability Affected: before 24.1 |
| CVE-2025-13668 | 6.7 | Dec 11 | A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege Affected: before 25.1 |
| CVE-2025-13664 | 6.7 | Dec 11 | A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege Affected: before 24.1 |
| CVE-2025-13663 | 6.7 | Dec 11 | Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation… Affected: before 25.1 |
| CVE-2023-24478 | 5.5 | Aug 15 | Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an… Affected: before 22.4 |
| CVE-2020-8767 | 5.5 | Nov 12 | Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local… Affected: before 20.2 |
| CVE-2019-14604 | 5.5 | Dec 16 | Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of… Affected: before 19.3 |
| CVE-2022-26888 | 4.1 | Feb 16 | Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access Affected: before 22.1; before 22.2 |
Showing 43