CVE-2024-29079

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-691

Affected software

No affected versions have been published.

Timeline

Published
Nov 13, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-29084.3The Call Now Button WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege usersCVE-2024-290806.5Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software DrivCVE-2024-290828.6Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6CVE-2024-290836.7Incorrect default permissions in some Intel(R) Distribution for Python software before version 2024.2 may allow an authenticated user to potCVE-2024-290855.5Improper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated user to potentially eCVE-2024-290865.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.CVE-2024-290896.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star RestaurantCVE-2024-29098.8A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setActionCVE-2024-290906.8Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: froCVE-2024-290917.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dnesscarkey WP Armour – Honeypot Anti CVE-2024-290926.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maciej Bis Permalink Manager Lite alloCVE-2024-290934.3Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-pro
CVE-2024-29079: High severity, CVSS 7.8 | Vulnix