CVE-2025-14605

5.4 mediumEPSS 0.1%

Medium (5.4) in intel quartus prime. EPSS 0.1% chance of exploitation in the next 30 days.

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 17.0 through 25.1.1.

Severity

CVSS 4.0

5.4 medium

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2026-01-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:quartus_prime

References

https://www.altera.com/security/security-advisory/asa-0004

Check your stack JSON