CVE-2024-39766 HIGH

CVE-2024-39766

Vendor N/A
Product Intel(R) Neural Compressor software
Weakness CWE-1336
Published November 13, 2024
Last update November 14, 2024
View on NVD All CVEs

CVSS base score

7.0/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Key dates

02Disclosure timeline

November 13, 2024 CVE published
November 14, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-49828 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution CVE-2023-6743 Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import CVE-2023-27995 CVE-2026-40087 LangChain has incomplete f-string validation in prompt templates CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE