CVE-2024-28887

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-288888.8A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted JavascripCVE-2024-288895.9When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditionsCVE-2024-28895.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon wp-liCVE-2024-288905.3Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a CVE-2024-288918.8SQL injection vulnerability exists in the script Handler_CFG.ashx.CVE-2024-288929.8An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary cCVE-2024-288937.7Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been CVE-2024-288945.3Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP NCVE-2024-288956.1'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerabiCVE-2024-288967.5Secure Boot Security Feature Bypass VulnerabilityCVE-2024-288976.8Secure Boot Security Feature Bypass VulnerabilityCVE-2024-288986.3Secure Boot Security Feature Bypass Vulnerability