Houjingyi

**Name of the Vulnerable Software and Affected Versions** OpenCL(TM) (affected versions not specified) **Description** The issue is related to an out-of-bounds read in some OpenCL(TM) software, which may allow an authenticated user to potentially enable denial of service via local access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: BigDL versions prior to 2.5.0 Description: The issue is related to the transmission of sensitive information in cleartext, which could allow a remote attacker to cause a denial of service. This can potentially be exploited by an authenticated user with adjacent access. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and limiting adjacent access to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: BigDL versions prior to 2.5.0 Description: The issue is related to improper access control in BigDL software, which may allow an authenticated user to potentially enable escalation of privilege via adjacent access. This could permit a remote attacker to elevate their privileges. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel Support android application (affected versions not specified) **Description** The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Distribution of OpenVINO(TM) Toolkit versions prior to 2022.3.0 **Description** The issue is related to an uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit. This may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2022.3.0, update to version 2022.3.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel Quartus Prime Pro and Standard edition software for Linux (affected versions not specified) **Description** The issue is related to an uncontrolled search path element in Intel Quartus Prime Pro and Standard edition software for Linux. This could allow an authenticated user to potentially enable escalation of privilege via local access, resulting in unauthorized access to information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel oneAPI Toolkit versions prior to 2021.1 Beta 10 **Description** The issue is related to improper access control in the Intel oneAPI Toolkit, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2021.1 Beta 10, update to version 2021.1 Beta 10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Pathfinder for RISC-V (affected versions not specified) **Description** The issue is related to an uncontrolled search path in Intel(R) Pathfinder for RISC-V software. This may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Trace Analyzer and Collector versions prior to 2021.6 for Intel(R) oneAPI HPC Toolkit **Description** The issue is related to an uncontrolled search path element in the Intel(R) Trace Analyzer and Collector, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2021.6, update to version 2021.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) oneAPI DPC++/C++ Compiler for Windows versions prior to 2022.2.1 Intel(R) oneAPI Toolkits versions prior to 2022.3.1 Intel Fortran Compiler for Windows versions prior to 2022.2.1 **Description** The issue is related to an uncontrolled search path in the compiler, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to elevate their privileges. **Recommendations** For Intel(R) oneAPI DPC++/C++ Compiler for Windows versions prior to 2022.2.1, update to version 2022.2.1 or later. For Intel(R) oneAPI Toolkits versions prior to 2022.3.1, update to version 2022.3.1 or later. For Intel Fortran Compiler for Windows versions prior to 2022.2.1, update to version 2022.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Kakao PotPlayer (affected versions not specified) **Description** A problematic issue has been found in the MID File Handler component of Kakao PotPlayer, leading to denial of service. The manipulation can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel(R) System Studio (affected versions not specified) **Description** The issue is related to an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel(R) VTune(TM) Profiler versions prior to 2022.2.0 **Description** The issue is related to an uncontrolled search path in the Intel(R) VTune(TM) Profiler software. This may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2022.2.0, update to version 2022.2.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Advisor versions prior to 2021.4.0 **Description** The issue is related to incorrect default permissions in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2021.4.0, update to version 2021.4.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Intel(R) Graphics Driver versions prior to 27.20.100.9030 Description: The issue is related to improper initialization in the Intel(R) Graphics Driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions prior to 27.20.100.9030, update to version 27.20.100.9030 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** VMware ThinApp versions 5.x prior to 5.2.10 **Description** The issue is related to insecure loading of DLLs, which can be exploited to elevate privileges. A malicious actor with non-administrative privileges may exploit this vulnerability to gain administrator-level access on a Windows operating system with VMware ThinApp installed. **Recommendations** For versions prior to 5.2.10, update to version 5.2.10 or later to resolve the issue. As a temporary workaround, consider restricting the loading of external DLLs to minimize the risk of exploitation.