CVE-2025-14596

None

CVSS

—

EPSS

0.1%

Published

Jan 7, 2026

CISA due date

—

The record

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1.

Affected packages

Ecosystem	Package	Introduced	Fixed