CVE-2024-37355

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Feb 12, 2025
CWE ID 284

Summary

CVE-2024-37355 is a newly disclosed vulnerability affecting certain Intel(R) Graphics software. This issue involves improper access control, allowing authenticated users to potentially escalate their privileges through local access. By exploiting this vulnerability, attackers could gain elevated system permissions, increasing their control over the affected system. The full impact of this vulnerability is still being assessed, but it poses a significant risk to systems with the vulnerable software installed. Intel has not yet released a patch for this vulnerability, so users are advised to take other measures to mitigate the risk, such as applying the principle of least privilege and monitoring their systems closely for unusual activity.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share