Privilege Escalation Risk in Intel IPP Software for Windows
CVE-2024-28952

Currently unrated

Key Information:

Vendor

Intel Corporation

Vendor
CVE Published:
13 November 2024

What is CVE-2024-28952?

The Intel Integrated Performance Primitives (IPP) software for Windows, prior to version 2021.12.0, is vulnerable to an uncontrolled search path issue. This vulnerability allows an authenticated user to potentially escalate their privileges through local access. Proper security measures and updates are necessary to mitigate the risks associated with this vulnerability, as it may lead to unauthorized control over affected systems.

References

https://www.intel.com/content/www/us/en/security-center/a...

Timeline

  • Vulnerability published

.