{"id":"CVE-2026-33567","kind":"vulnerability","aliases":["CVE-2026-33567"],"related":[],"title":"Intel VTune Profiler: input validation flaw allows local privilege escalation","description":"Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Intel VTune Profiler has an input validation flaw that lets software running in user space escalate its privileges. An attacker needs a local authenticated account, a high-complexity attack, and active user interaction.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["intel","linux","other","vtune-profiler","windows"],"not_affected_if":["single-user-machine","vtune-profiler-not-installed"],"how_to_check":"- Check the installed VTune Profiler version against the affected ranges in Intel's advisory (unknown from the sources given).\n- Look for VTune Profiler on machines where developers or analysts run it.","fix":null,"status":"open","published_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","triaged_at":"2026-11-10T17:24:28+00:00","updated_at":"2026-11-10T17:24:28+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-10T17:24:28Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel VTune Profiler: input validation flaw allows local privilege escalation","impact":"high","summary":"Intel VTune Profiler has an input validation flaw that lets software running in user space escalate its privileges. An attacker needs a local authenticated account, a high-complexity attack, and active user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":["intel","vtune-profiler","windows","linux"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Find Intel's security advisory for VTune Profiler to get affected and fixed versions and the platforms covered.","how_to_check":"- Check the installed VTune Profiler version against the affected ranges in Intel's advisory (unknown from the sources given).\n- Look for VTune Profiler on machines where developers or analysts run it.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["vtune-profiler-not-installed","single-user-machine"],"who_is_affected":"Systems where VTune Profiler is installed and local users can run software alongside it. The sources describe a local, authenticated, high-complexity attack that needs user interaction, so shared or multi-user machines carry more exposure than single-user workstations. unknown for exact affected versions.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000724,"input_tokens":4656,"output_tokens":516,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-33567':13A,16A '3':71C 'access':105C 'account':48B 'activ':55B,118C 'adversari':82C 'allow':7A,75C 'applic':73C 'attack':43B,53B,92C,107C 'authent':47B,85C 'avail':132C,147C 'combin':87C 'complex':52B,91C 'confidenti':127C,142C 'cve':11A,14A 'enabl':94C 'escal':10A,39B,77C,95C 'flaw':6A,31B 'high':51B,90C,128C,130C,133C 'high-complex':50B 'impact':125C,149C 'improp':58C 'input':4A,29B,59C 'integr':129C,144C 'intel':1A,17B,24B,63C 'interact':57B,120C 'intern':114C 'knowledg':115C 'let':33B 'linux':18B 'local':8A,46B,104C 'may':74C,93C,100C,124C 'need':44B 'none':143C,145C,148C 'occur':102C 'potenti':101C,122C 'present':111C 'privileg':9A,41B,79C,97C 'profil':3A,22B,26B,67C 'r':64C 'requir':108C,117C 'result':99C,138C 'ring':70C 'run':35B 'softwar':34B,68C,81C 'space':38B 'special':113C 'subsequ':140C 'system':137C,141C 'tm':66C 'unprivileg':80C 'user':37B,56B,72C,86C,119C 'valid':5A,30B,60C 'via':103C 'vtune':2A,21B,25B,65C 'vtune-profil':20B 'vulner':123C,136C 'window':23B 'within':69C 'without':112C","nicknames":[],"mitigations":[],"who_affected":"Systems where VTune Profiler is installed and local users can run software alongside it. The sources describe a local, authenticated, high-complexity attack that needs user interaction, so shared or multi-user machines carry more exposure than single-user workstations. unknown for exact affected versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["intel","linux","medium","other","vtuneprofiler","windows"],"campaign_type":null,"search_a":"'-2026':12A,15A '-33567':13A,16A 'allow':7A 'cve':11A,14A 'escal':10A 'flaw':6A 'input':4A 'intel':1A 'local':8A 'privileg':9A 'profil':3A 'valid':5A 'vtune':2A","search_b":"'account':48B 'activ':55B 'attack':43B,53B 'authent':47B 'complex':52B 'escal':39B 'flaw':31B 'high':51B 'high-complex':50B 'input':29B 'intel':17B,24B 'interact':57B 'let':33B 'linux':18B 'local':46B 'need':44B 'privileg':41B 'profil':22B,26B 'run':35B 'softwar':34B 'space':38B 'user':37B,56B 'valid':30B 'vtune':21B,25B 'vtune-profil':20B 'window':23B","search_c":"'3':71C 'access':105C 'activ':118C 'adversari':82C 'allow':75C 'applic':73C 'attack':92C,107C 'authent':85C 'avail':132C,147C 'combin':87C 'complex':91C 'confidenti':127C,142C 'enabl':94C 'escal':77C,95C 'high':90C,128C,130C,133C 'impact':125C,149C 'improp':58C 'input':59C 'integr':129C,144C 'intel':63C 'interact':120C 'intern':114C 'knowledg':115C 'local':104C 'may':74C,93C,100C,124C 'none':143C,145C,148C 'occur':102C 'potenti':101C,122C 'present':111C 'privileg':79C,97C 'profil':67C 'r':64C 'requir':108C,117C 'result':99C,138C 'ring':70C 'softwar':68C,81C 'special':113C 'subsequ':140C 'system':137C,141C 'tm':66C 'unprivileg':80C 'user':72C,86C,119C 'valid':60C 'via':103C 'vtune':65C 'vulner':123C,136C 'within':69C 'without':112C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:41+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-33567","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33567","severity":null,"published_at":"2026-11-10T17:17:41+00:00","modified_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","fetched_at":"2026-11-10T17:22:42+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}