CVE Feed

    Dashboard / CVE / CVE-2024-36245

    CVE-2024-36245

    Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published:Nov 13, 2024
    Last Modified:Sep 2, 2025
    EPS:Nov 13, 2024
    EPSS Score:0.0003
    CVSS Score:6.7

    Affected Products

    Vendor
    Intel
    Product
    Oneapi Base Toolkit
    Vendor
    Intel
    Product
    System Bring-up Toolkit
    Vendor
    Intel
    Product
    Vtune Profiler

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Related CVEs

    CVE-2025-20079 (CVSS 5.4) — Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially ena…
    CVE-2024-39284 (CVSS 5.4) — Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated u…
    CVE-2024-37027 (CVSS 5.2) — Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an au…
    CVE-2024-28952 (CVSS 5.4) — Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an auth…
    CVE-2024-23495 (CVSS 5.4) — Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow…
    CVE-2024-24973 (CVSS 1) — Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an…
    CVE-2024-23491 (CVSS 5.4) — Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an a…
    CVE-2024-25562 (CVSS 5.8) — Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow …
    CVE-2024-26025 (CVSS 5.4) — Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authentica…
    CVE-2024-21784 (CVSS 5.4) — Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High