CVE-2021-0077

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	Intel(R) VTune(TM) Profiler	before version 2021.1.1

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00518.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00518.htmlPatch, Vendor Advisory

Timeline

Published: Jun 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-00788.1Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated CVE-2021-00796.5Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated CVE-2021-00827.8Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentiall CVE-2021-00834.4Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to CVE-2021-00847.8Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an auth CVE-2021-00866.5Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable CVE-2021-00896.5Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via lo CVE-2021-00907.3Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalati CVE-2021-00917.8Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation o CVE-2021-00924.4Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service v CVE-2021-00934.4Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of ser CVE-2021-00947.8Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable