CVE-2024-28950

MEDIUM

Intel(R) oneAPI Math Kernel Library <2024.2 - Privilege Escalation

Title source: llm

Description

Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Scores

CVSS v3 6.7
EPSS 0.0004
EPSS Percentile 10.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status draft

Timeline

Published Nov 13, 2024
Tracked Since Feb 18, 2026