CVE-2025-20106: Medium severity Intel Vtune Profiler vulnerability
Uncontrolled search path in some software installer for some VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20106?
CVE-2025-20106 has a high severity rating due to its potential to allow privilege escalation.
How do I fix CVE-2025-20106?
To resolve CVE-2025-20106, upgrade to versions of Intel VTune Profiler and Intel oneAPI Base Toolkits released after 2025.0.
What types of systems are affected by CVE-2025-20106?
CVE-2025-20106 affects user applications running Intel VTune Profiler and Intel oneAPI Base Toolkits before version 2025.0.
Who is at risk from CVE-2025-20106?
Authenticated users with access to vulnerable installations of the software are at risk from CVE-2025-20106.
What does CVE-2025-20106 allow an attacker to do?
CVE-2025-20106 allows an attacker to escalate their privileges within the affected software environment.