CVE-2018-12215
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Intel(R) Graphics Driver for Windows contains insufficient input validation in the Kernel Mode Driver. A privileged user can exploit this locally to cause a denial of service.
Risk Assessment
A privileged local user can crash or hang the graphics subsystem, potentially disrupting workstation availability.
Recommendation
Update the Intel Graphics Driver for Windows to a version newer than those listed (e.g., 24.20.100.6373 or later) and limit privileged account access to the minimum necessary.
Other vulnerabilities in Intel Graphics Driver for Windows
See all- CVE-2018-18091Medium
Intel(R) Graphics Driver for Windows contains a use-after-free in the Kernel Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-18090Medium
Intel(R) Graphics Driver for Windows contains an out-of-bounds read in igdkm64.sys. An authenticated user can potentially enable denial of service via local access.
- CVE-2018-18089Medium
Intel(R) Graphics Driver for Windows contains multiple out-of-bounds reads in igdkm64.sys. An authenticated user can potentially enable information disclosure via local access.
- CVE-2018-12223Medium
Intel(R) Graphics Driver for Windows contains insufficient access control in the User Mode Driver. An unprivileged user can potentially escape from a virtual machine guest-to-host via local access.
- CVE-2018-12222Low
Insufficient input validation in the Kernel Mode Driver of Intel(R) Graphics Driver for Windows allows an unprivileged user to cause an out-of-bounds memory read via local access.
- CVE-2018-12218Low
Unhandled exception in the User Mode Driver of Intel(R) Graphics Driver for Windows allows an unprivileged user to cause a memory leak via local access.
- CVE-2018-12213Medium
Intel(R) Graphics Driver for Windows contains potential memory corruption in the Kernel Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-12211Medium
Intel(R) Graphics Driver for Windows contains insufficient input validation in the User Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-12210Medium
Intel(R) Graphics Driver for Windows contains multiple pointer dereferences in the User Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-12209Low
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064, and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.
Original NVD description (English source)
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

