CVE-2022-38136: 
Intel oneAPI DPC++/C++ Compiler vulnerability analysis and mitigation

An uncontrolled search path vulnerability was identified in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1. This vulnerability could potentially allow an authenticated user to escalate privileges through local access (Intel Advisory).

The vulnerability, tracked as CVE-2022-38136, affects Intel's compiler products, specifically the oneAPI DPC++/C++ Compiler and Fortran Compiler for Windows. The issue stems from an uncontrolled search path implementation that could be exploited by authenticated users with local access (Intel Advisory).

If successfully exploited, this vulnerability could enable an authenticated user to escalate privileges on the affected system through local access (Intel Advisory).

The vulnerability requires local access and authentication for exploitation. The attacker must have valid credentials on the target system to attempt exploitation (Intel Advisory).

Intel has addressed this vulnerability by releasing version 2022.2.1 of the oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows, as well as version 2022.3.1 of some Intel oneAPI Toolkits. Users are advised to update to these or later versions to mitigate the vulnerability (Intel Advisory).