CVE-2024-36245

Summary

CVE-2024-36245 is a newly disclosed vulnerability affecting some versions of Intel(R) VTune(TM) Profiler software. This issue involves an uncontrolled search path element, which can potentially be exploited by authenticated users to escalate their privileges and gain elevated access to the system. By manipulating the software's search path, an attacker may be able to execute arbitrary code or access sensitive information. The vulnerability exists before version 2024.2.0 and poses a local access risk. It is essential for organizations using Intel VTune Profiler to apply the latest patch to mitigate this escalation of privilege risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.