CVE-2023-27391
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.18% probability · 7th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- intel/advisor for oneapi · intel/cpu runtime for opencl applications · intel/distribution for python programming language · intel/dpc\+\+ compatibility tool · intel/embree ray tracing kernel library · intel/fortran compiler · intel/implicit spmd program compiler · intel/inspector for oneapi · intel/integrated performance primitives · intel/ipp cryptography · intel/mpi library · intel/oneapi base toolkit · intel/oneapi data analytics library · intel/oneapi deep neural network library · intel/oneapi dpc\+\+\/c\+\+ compiler · intel/oneapi dpc\+\+ library \(onedpl\) · intel/oneapi hpc toolkit · intel/oneapi iot toolkit · intel/oneapi math kernel library · intel/oneapi rendering toolkit · +9 more
- Source
- secure@intel.com
EPSS 0.2% since 4 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.