Uncontrolled Search Path Vulnerability in Intel Processor Identification Utility

CVE-2024-21774

What is CVE-2024-21774?

The uncontrolled search path vulnerability in Intel's Processor Identification Utility allows an authenticated user to manipulate the search path for resource loading. This can potentially lead to privilege escalation through local access, enabling the execution of unauthorized code with elevated privileges. Users of versions prior to 6.10.34.1129 and 7.1.6 are advised to update their software to mitigate exposure to this security risk.

References