CVE-2024-35245

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Uncontrolled search path element in some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

VendorProductVersions
n/aIntel(R) PROSet/Wireless WiFi software for Windowsbefore version 23.60
intelproset\/wireless_wifi< 23.60

References

Timeline

Published
Nov 13, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-352467.5An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.CVE-2024-352475.5In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current impleCVE-2024-352487.3Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityCVE-2024-352498.8Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityCVE-2024-35255.4A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown funcCVE-2024-352507.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-352527.5Azure Storage Movement Client Library Denial of Service VulnerabilityCVE-2024-352534.4Microsoft Azure File Sync Elevation of Privilege VulnerabilityCVE-2024-352547.1Azure Monitor Agent Elevation of Privilege VulnerabilityCVE-2024-352555.5Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege VulnerabilityCVE-2024-352568.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35265.4A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerability