Intel Neural Compressor Software vulnerabilities

5 CVEs affecting Intel Neural Compressor Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-39766, published 2024-11-13.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-22476, published 2024-05-16. Critical severity, CVSS 10.0. EPSS: 36% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.
• CVE-2024-39368, published 2024-11-13. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially…
• CVE-2024-28028, published 2024-11-13. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
• CVE-2024-39766, published 2024-11-13. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of…
• CVE-2024-21792, published 2024-05-16. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access.