CVE-2024-21784
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Aug 14, 2024
CWE ID 427
Summary
CVE-2024-21784 is a newly disclosed vulnerability affecting Intel(R) IPP Cryptography software versions before 2021.11. This issue grants authenticated users an uncontrolled search path, potentially enabling privilege escalation through local access. By manipulating the software's search path, attackers may gain elevated permissions, leading to serious security implications. Intel strongly recommends installing the latest software updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.