CVE-2024-28952

Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - secure@intel.com

Published

2024-11-13

Last modified

2024-11-14

Weaknesses

CWE-427

Affected products

• Integrated Performance Primitives (Intel)
• Ipp Software (Intel)
• Oneapi Base Toolkit (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01140.html