QP
Product
Quartus Prime
43
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 28Medium 15Low 0
Watch
Add Quartus Prime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38668 | 7.8 | Nov 13 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable… Affected: before 23.1.1 |
| CVE-2024-38383 | 7.8 | Nov 13 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation… Affected: before 24.2 |
| CVE-2024-23907 | 7.8 | Aug 14 | Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege… Affected: before 23.4 |
| CVE-2024-22184 | 7.8 | Aug 14 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of… Affected: before 24.1 |
| CVE-2022-41693 | 7.8 | May 10 | Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege… Affected: before 22.3 |
| CVE-2022-34157 | 7.8 | Feb 16 | Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially… Affected: before 21.1; before 21.3 |
| CVE-2022-33902 | 7.8 | Feb 16 | Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege… Affected: before 22.1; before 22.2 |
| CVE-2022-33892 | 7.8 | Feb 16 | Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access Affected: before 22.1; before 22.2 |
| CVE-2022-32570 | 7.8 | Feb 16 | Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local… Affected: before 22.1; before 22.2 |
| CVE-2022-26840 | 7.8 | Feb 16 | Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local… Affected: before 22.1; before 22.2 |
| CVE-2022-27187 | 7.8 | Nov 11 | Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable… Affected: through 21.1 |
| CVE-2022-21220 | 7.8 | Feb 9 | Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of… Affected: before 21.3 |
| CVE-2022-21204 | 7.8 | Feb 9 | Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access Affected: before 21.3 |
| CVE-2022-21203 | 7.8 | Feb 9 | Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable… Affected: before 21.1 |
| CVE-2022-21174 | 7.8 | Feb 9 | Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of… Affected: before 21.3 |
| CVE-2021-44454 | 7.8 | Feb 9 | Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation… Affected: before 21.3 |
| CVE-2019-14603 | 7.8 | Dec 16 | Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially… Affected: before 19.3 |
| CVE-2019-0171 | 7.8 | May 17 | Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access Affected: 15.1 through 18.1 |
| CVE-2018-3683 | 7.8 | Jul 10 | Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code Affected: 15.1 through 18.0 |
| CVE-2022-27233 | 7.5 | Nov 11 | XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable… Affected: through 21.1; before 22.1 |
| CVE-2022-21205 | 7.5 | Feb 9 | Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to… Affected: before 21.3 |
| CVE-2020-24454 | 7.5 | Nov 12 | Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition… Affected: through 20.1; before 20.3 |
| CVE-2024-21862 | 7.3 | May 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of… Affected: before 23.1 |
| CVE-2024-21837 | 7.3 | May 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of… Affected: before 23.1 |
| CVE-2024-21809 | 7.3 | May 16 | Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of… Affected: before 23.1 |
| CVE-2024-21777 | 7.3 | May 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of… Affected: before 23.4 |
| CVE-2023-24016 | 7.3 | Aug 11 | Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of… Affected: before 22.1std; before 22.4 |
| CVE-2022-37329 | 7.3 | Feb 16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via… Affected: before 21.1; before 21.3 |
Showing 28