CVE-2025-24307

Intel CIP software vulnerability CVE-2025-24307 affects Intel® CIP software prior to WIN_DCA_2.4.0.11001, involving privilege management in Ring 3: User Applications. The flaw may allow an unprivileged, authenticated user with high complexity attack requirements to escalate privileges and manipul...

CVE-2025-24862

Intel CIP software prior to WIN_DCA_2.4.0.11001 contains CVE-2025-24862: an unrestricted upload of a dangerous file type in Ring 3 User Applications, potentially enabling privilege escalation and data manipulation. The issue requires network access with internal knowledge and passive user interac...