---
id: "CVE-2026-33567"
page: "https://infrastack.ai/live/CVE-2026-33567"
kind: "vulnerability"
aliases: ["CVE-2026-33567"]
title: "Intel VTune Profiler: input validation flaw allows local privilege escalation"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["intel", "linux", "other", "vtune-profiler", "windows"]
not_affected_if: ["single-user-machine", "vtune-profiler-not-installed"]
published_at: "2026-11-10T17:17:41+00:00"
first_seen_at: "2026-11-10T17:22:42+00:00"
updated_at: "2026-11-10T17:24:28+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33567", "first_seen_at": "2026-11-10T17:22:42+00:00"}]
exploit_sources: []
---

# Intel VTune Profiler: input validation flaw allows local privilege escalation

Link for people: https://infrastack.ai/live/CVE-2026-33567 (this .md is for agents)

Intel VTune Profiler has an input validation flaw that lets software running in user space escalate its privileges. An attacker needs a local authenticated account, a high-complexity attack, and active user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed VTune Profiler version against the affected ranges in Intel's advisory (unknown from the sources given).
- Look for VTune Profiler on machines where developers or analysts run it.

## Timeline

- 2026-11-10T17:22:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-33567

## From the sources

Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_