CVE-2025-14605

MEDIUM 6.7CVE-2025-14605 · Published 07/01/2026 · updated 17/06/2026

In short

CVE-2025-14605 is a MEDIUM (CVSS 6.7) vulnerability affecting quartus prime (intel).
Chance of exploitation in the next 30 days (EPSS): 0.11%, higher than 1.3% of all vulnerabilities.
Fix: update to 25.1.1 or later.

Package	Affected versions	Patched versions
quartus prime intel	`≥ 17.0, < 25.1.1`	`25.1.1`

Description

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 17.0 through 25.1.1.

References

altera.com/security/security-advisory/asa-0004 · Vendor Advisory

More vulnerabilities in quartus prime

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

quartus prime

intel

≥ 17.0, < 25.1.1

25.1.1

More vulnerabilities in quartus prime

See all →