CVE-2024-28952

Summary

CVE-2024-28952 is a recently disclosed vulnerability affecting Intel(R) IPP software for Windows before version 2021.12.0. This issue grants authenticated users an unchecked search path, potentially enabling privilege escalation through local access. The vulnerability could allow attackers to gain elevated permissions, increasing the risk of data theft or unauthorized system changes. Intel has released a patch to address this issue, and users are strongly encouraged to install it to mitigate the risk. The specifics of the vulnerability involve the software's failure to properly check user-supplied search paths, creating an opportunity for privilege escalation attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.