CVE-2025-14614

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Insecure Temporary File vulnerability in Altera Quartus Prime Standard 

Installer (SFX)

on Windows, Altera Quartus Prime Lite 

Installer (SFX)

on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jan 7, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-146157.1The DASHBOARD BUILDER – WordPress plugin for Charts and Graphs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versiCVE-2025-146164.3The Recooty – Job Widget (Old Dashboard) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includiCVE-2025-146175.3A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the componenCVE-2025-146184.3The Sweet Energy Efficiency plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capabCVE-2025-146199.8A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality ofCVE-2025-146209.8A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of CVE-2025-146219.8A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_uCVE-2025-146229.8A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the fileCVE-2025-146239.8A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /CVE-2025-146256.7Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus PCVE-2025-146266.4The QR Code for WooCommerce order emails, PDF invoices, packing slips plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CVE-2025-146276.4The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up
CVE-2025-14614: Medium severity, CVSS 6.7 | Vulnix