CVE-2024-36294

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-277 CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-362957.2A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HT CVE-2024-36305.4The HL Twitter WordPress plugin through 2014.1.18 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2024-363027.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte CVE-2024-363037.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecte CVE-2024-363047.0A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escala CVE-2024-363057.8A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected instal CVE-2024-363065.5A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to c CVE-2024-363075.5A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sen CVE-2024-36314.3The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check when unlinking twitter accounts, which could allow attackers to m CVE-2024-363104.6Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SM CVE-2024-363114.6A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input valid CVE-2024-363155.7Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens