CVE-2023-38566

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Feb 14, 2024
CWE ID 427

Summary

CVE-2023-38566 is a vulnerability affecting Intel(R) ISPC software versions prior to 1.21.0. An authenticated user can exploit an uncontrolled search path in this software, potentially enabling privilege escalation through local access. This issue may allow attackers to elevate their system permissions, posing a significant security risk. Intel has released a patch to address this vulnerability, and users are encouraged to update their software to mitigate this threat. Failure to address this issue may result in unauthorized access or system takeover.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share