CVE Catalog

CVE-2018-12209

LowCVSS 3.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.32%

25th percentile - higher than 25% of all known CVEs

Summary

Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064, and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.

Risk Assessment

An unprivileged local user can obtain graphics device configuration information, which may facilitate further attacks or disclose sensitive data. The risk affects Windows systems with vulnerable Intel Graphics driver versions.

Recommendation

Update the Intel(R) Graphics Driver for Windows to a version later than those listed (e.g., 24.20.100.6373 or newer). Verify the driver version on the system and apply the vendor update.

Other vulnerabilities in Intel Graphics Driver for Windows

See all
Original NVD description (English source)

Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS