Fabian Freyer

**Name of the Vulnerable Software and Affected Versions** Intel(R) oneAPI DPC++/C++ Compiler versions prior to 2022.2.1 Intel C++ Compiler Classic versions prior to 2021.7.1 Intel(R) oneAPI Toolkits versions prior to 2022.3.1 **Description** The issue is related to improper access control in the Intel(R) oneAPI DPC++/C++ Compiler and Intel C++ Compiler Classic, which may allow an authenticated user to potentially enable escalation of privilege via local access. This vulnerability is associated with deficiencies in access control, which can be exploited by an attacker to elevate their privileges. **Recommendations** For Intel(R) oneAPI DPC++/C++ Compiler versions prior to 2022.2.1, update to version 2022.2.1 or later. For Intel C++ Compiler Classic versions prior to 2021.7.1, update to version 2021.7.1 or later. For Intel(R) oneAPI Toolkits versions prior to 2022.3.1, update to version 2022.3.1 or later.

**Name of the Vulnerable Software and Affected Versions** iTerm2 versions up to and including 3.3.5 **Description** A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This may allow an attacker to execute arbitrary commands on their victim's computer by providing malicious output to the terminal. It could be exploited using command-line utilities that print attacker-controlled content. **Recommendations** For versions up to and including 3.3.5, update to a version later than 3.3.5 to resolve the issue. As a temporary workaround, consider restricting the use of tmux's control mode in iTerm2 until a patch is available. Avoid using command-line utilities that print attacker-controlled content in the affected terminal app until the issue is resolved.