Intel DSA Privilege Escalation Vulnerabilities Advisory (CVE-2024-36488/36294)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Intel® DSA Software Advisory 2. Vulnerability ID: INTEL-SA-01200 3. Impact Category: Software 4. Impact Description: Potential security vulnerabilities exist in certain Intel® DSA software versions prior to this advisory, which could lead to privilege escalation. 5. Vulnerability Details: - CVEID: CVE-2024-36488 - Description: Potential security vulnerabilities exist in certain Intel® DSA software versions prior to this advisory, which could lead to privilege escalation. - CVSS Base Score: 3.1, High - CVSS Vector 3.1: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVEID: CVE-2024-36294 - Description: Potential security vulnerabilities exist in certain Intel® DSA software versions prior to this advisory, which could lead to privilege escalation. - CVSS Base Score: 3.1, Medium - CVSS Vector 3.1: AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H 6. Affected Products: Intel® DSA software versions prior to the advisory. 7. Recommended Actions: Users are advised to update to Intel® DSA version 24.3.26.8 or later. 8. Update Download: Updates are available at: https://www.intel.com/content/www/us/en/support/intel-driver-support-assistant.html 9. Acknowledgments: Thanks to Trend Micro Zero Day Initiative and @sim0nsecurity for reporting these issues. 10. Legal Disclaimer: Intel provides materials "as is" without warranty, express or implied. 11. Reporting Vulnerabilities: For information regarding security issues, please email secure@intel.com and encrypt sensitive information using the provided PGP public key. 12. Product Support: For product support inquiries, visit the Support & Downloads page. This information provides a detailed description of potential security vulnerabilities in Intel® DSA software, including their impact, affected products, recommended mitigation steps, and guidance on how to report issues or obtain product support.

Goal Reached Thanks to every supporter — we hit 100%!

Intel DSA Privilege Escalation Vulnerabilities Advisory (CVE-2024-36488/36294)