CVE-2024-21864CWE-86

Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially…

High · published May 16, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-86 · Improper Neutralization of Invalid Characters in Identifiers in Web Pages
Published
2024-05-16T20:47Z
EPSS history
Timeline
  • 16 MAY 20:47Z
    Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially…
    cvelistv5