CVE-2022-33902

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) Quartus Prime Pro and Standard edition software	See references

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.htmlVendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.htmlVendor Advisory

Timeline

Published: Feb 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-339037.5Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.CVE-2022-339057.0DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU att CVE-2022-339066.4DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption throug CVE-2022-339076.4DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corrup CVE-2022-339087.0DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a T CVE-2022-339097.0DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TO CVE-2022-33914.8The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2022-339105.4An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a CVE-2022-339115.3An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Servi CVE-2022-339127.8A permission issue affects users that deployed the shipped version of the Checkmk Debian package. Packages created by the agent bakery (ente CVE-2022-339137.5In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission ch CVE-2022-339157.0Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that co