CVE-2024-21831

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processor Diagnostic Tool software	before version 4.1.9.41
intel	processor_diagnostic_tool	< 4.1.9.41

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01069.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01069.htmlVendor Advisory

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-218323.5A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.CVE-2024-218338.8Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The CVE-2024-218345.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2024-218357.8Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable CVE-2024-218369.8A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A speciall CVE-2024-218377.3Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user CVE-2024-218385.4Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead CVE-2024-21849.8Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allo CVE-2024-218407.1Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific file CVE-2024-218416.7Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticated user to potentiall CVE-2024-218436.7Uncontrolled search path for some Intel(R) Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user CVE-2024-218444.3Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent a