CVE-2025-14599

5.4 mediumEPSS 0.1%

Medium (5.4) in intel quartus prime. EPSS 0.1% chance of exploitation in the next 30 days.

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.

Severity

CVSS 4.0

5.4 medium

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2026-01-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:quartus_prime

References

https://www.altera.com/security/security-advisory/asa-0005

Check your stack JSON