Computing Improvement Program
Vendor:
First CVE: Sep 12, 2018 · Active for 7 years
21
Total CVEs
More Total CVEs than 94% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 29% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Computing Improvement Program over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 12, 2018
7 years ago
Most Recent CVE
Nov 11, 2025
255 days ago
CVE Severity & Scoring
Computing Improvement Program21 CVEs
10%
48%
43%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local12 (57.1%)
Network8 (38.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (4.8%)
Attack Complexity
Low16 (76.2%)
High5 (23.8%)
Unknown0 (0.0%)
User Interaction
None16 (76.2%)
Unknown0 (0.0%)
Required5 (23.8%)
Privileges Required
Low13 (61.9%)
High7 (33.3%)
None1 (4.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-24838HIGH Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged | Nov 11, 2025 | 8.8 | 28 | NO | NO |
CVE-2025-24299HIGH Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged soft | Nov 11, 2025 | 8.8 | 28 | NO | NO |
CVE-2020-8736HIGH Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user to potentially enable escalation of priv | Aug 13, 2020 | 7.8 | 25 | NO | NO |
CVE-2021-0074HIGH Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalati | Jun 9, 2021 | 7.8 | 24 | NO | NO |
CVE-2019-11162HIGH Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentia | Aug 19, 2019 | 7.8 | 24 | NO | NO |
CVE-2018-12168HIGH Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administra | Sep 12, 2018 | 7.8 | 24 | NO | NO |
CVE-2021-0052HIGH Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially enable an escalation of privilege | Jun 9, 2021 | 7.8 | 23 | NO | NO |
CVE-2025-24863MEDIUM Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged s | Nov 11, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-24834MEDIUM Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged so | Nov 11, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-20614MEDIUM External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unpri | Nov 11, 2025 | 6.7 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Computing Improvement Program
Top CWEs
Versions
No cataloged versions.