CVE-2024-31155

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 12, 2025
CWE ID 119

Summary

CVE-2024-31155 is a newly identified vulnerability affecting certain Intel(R) Processors. The issue lies in the UEFI firmware's improper buffer restrictions, creating a potential privilege escalation risk for privileged users. By taking advantage of this flaw, an attacker could gain elevated access to the system through local access, posing a significant security threat. System administrators and users are urged to install the necessary patches and updates to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share