CVE-2023-35192 is a medium severity (CVSS 6.7) uncontrolled search path flaw in Intel Graphics Performance Analyzers (GPA) Framework software before version 2023.3. A local, authenticated user could potentially escalate privileges. Intel recommends updating to version 2023.3 or later, which is the fixed release.
What's affected
Intel advisory INTEL-SA-00831 names Intel GPA Framework software before version 2023.3. The fixed version is 2023.3 or later. The record scores the flaw 6.7 (Medium) with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, and Intel's advisory gives the same score and vector, so there is no disagreement on severity.
The weakness is CWE-427, uncontrolled search path element. The record does not mark this CVE as exploited in the wild, and neither does the Intel advisory page we read.
How to check if you're exposed
GPA is a developer tool, so it is mostly found on engineering workstations rather than production servers. Start there.
- On Windows, open Settings, then Apps, and look for Intel Graphics Performance Analyzers or Intel GPA Framework. Note the version.
- If you manage machines centrally, query your software inventory for the same product names and list every version below 2023.3.
- Include build machines and shared lab images, since a developer tool often lives on a golden image.
Safeguard offers a free in-browser dependency scan at gold.safeguard.sh/scan. It reads package manifests, so it will not see a device firmware image, but it is useful for the software side of your estate.
What to do now
- Update Intel GPA Framework to version 2023.3 or later using the download page linked from Intel's advisory.
- Remove the tool from machines that no longer need it.
- Check the permissions on the install folder and on any folder that appears in the tool's search path, so that ordinary users cannot write there.
- Record the update in your inventory so the next audit finds it quickly.
Why it matters
An uncontrolled search path means a program looks for a file, such as a library, in a place an attacker may be able to influence. If the program loads the attacker's file instead of the intended one, the attacker's code runs with the program's privileges.
The score is moderate because the attack needs local access, a low privileged account, some user interaction and conditions that are not easy to arrange. Moderate does not mean ignore. Privilege escalation flaws on shared developer machines are often the second step after an initial foothold, so patching them removes a useful stepping stone.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Is CVE-2023-35192 exploitable remotely?
No. The vector is local (AV:L) and requires an authenticated user, so an attacker needs some access to the machine first.
Which version fixes it?
Intel GPA Framework 2023.3 or later, according to Intel's advisory.
Sources
Last reviewed: 19 October 2026.
