CVE-2024-21799

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 22

Summary

CVE-2024-21799 is a vulnerability affecting Intel(R) Extension for Transformers software versions prior to 1.5. An authenticated user can exploit this path traversal issue for potential privilege escalation through local access. This vulnerability could allow unauthorized access to sensitive data or system functions, posing a significant security risk. Intel has released a patch to address this issue, and users are strongly encouraged to apply it promptly to mitigate the threat. Failure to do so may result in compromised systems and potential data breaches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share