CVE-2018-12174

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-121757.8Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileCVE-2018-121768.2Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in infoCVE-2018-121777.8Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an autCVE-2018-121789.1Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of serviCVE-2018-121797.8Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, informatiCVE-2018-12187.5In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes CVE-2018-121808.8Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information dCVE-2018-121816.0Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege viaCVE-2018-121826.7Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, infCVE-2018-121836.8Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosureCVE-2018-121856.8Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthentiCVE-2018-121877.5Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20
CVE-2018-12174: High severity, CVSS 7.8 | Vulnix