Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-20087 Details
Description
Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
A vulnerability exists in some Intel oneAPI DPC++/C++ Compiler software installers due to incorrect default permissions. This flaw may allow an authenticated user to escalate privileges through local access.
Users are advised to update Intel oneAPI Toolkits and standalone component software to the latest versions. For Intel oneAPI DPC++/C++ Compiler software for open source, version 6.0.0 or later should be installed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 12, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
CISA-ADP
Assessed Aug 13, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01285.html | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-276 | Incorrect Default Permissions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Intel oneAPI Base Toolkit | All versions |
CPE
Remediation
| |
| Intel FPGA Support Package | All versions |
CPE
Remediation
| |
| Intel oneAPI Data Analytics Library | All versions |
CPE
Remediation
| |
| Intel oneAPI DPC++/C++ Compiler | All versions |
CPE
Remediation
| |
| Intel DPC++ Compatibility Tool | All versions |
CPE
Remediation
| |
| Intel Distribution for GDB | All versions |
CPE
Remediation
| |
| Intel Fortran Compiler | All versions |
CPE
Remediation
| |
| Intel HPC Toolkit | All versions |
CPE
Remediation
| |
| Intel Inspector | All versions |
CPE
Remediation
| |
| Intel Integrated Performance Primitives | All versions |
CPE
Remediation
| |
| Intel Integrated Performance Primitives Cryptography | All versions |
CPE
Remediation
| |
| Intel Trace Analyzer and Collector | All versions |
CPE
Remediation
| |
| Intel MPI Library | All versions |
CPE
Remediation
| |
| Intel Graphics Offline Compiler | All versions |
CPE
Remediation
| |
| Intel Advisor | All versions |
CPE
Remediation
| |
| Intel VTune Profiler | All versions |
CPE
Remediation
| |
| Intel oneAPI Deep Neural Network Library | All versions |
CPE
Remediation
| |
| Intel oneAPI DPC++ Library | All versions |
CPE
Remediation
| |
| Intel oneAPI Math Kernel Library | All versions |
CPE
Remediation
| |
| Intel oneAPI Threading Building Blocks | All versions |
CPE
Remediation
| |
| Intel oneAPI DPC++/C++ Compiler | < 2025.1.0 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 12, 2025 | New CVE Received | [email protected] |