CVEvulnerability
CVE-2018-12209
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 3.3 LOW — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-732
Description
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.
Affected configurations
• intel graphics driver 15.33.43.4425
• intel graphics driver 15.33.45.4653
• intel graphics driver 15.33.46.4885
• intel graphics driver 15.36.26.4294
• intel graphics driver 15.36.28.4332
• intel graphics driver 15.36.31.4414
• intel graphics driver 15.36.33.4578
• intel graphics driver 15.36.34.4889
• intel graphics driver 15.40.34.4624
• intel graphics driver 15.40.36.4703
• intel graphics driver 15.40.37.4835
• intel graphics driver 15.40.38.4963
• intel graphics driver 15.40.41.5058
• intel graphics driver 15.45.18.4664
• intel graphics driver 15.45.19.4678
• intel graphics driver 15.45.21.4821
• intel graphics driver 15.45.23.4860
• intel graphics driver 24.20.100.6025
• intel graphics driver 24.20.100.6094
• intel graphics driver 24.20.100.6136
• intel graphics driver 24.20.100.6194
• intel graphics driver 24.20.100.6229
• intel graphics driver 24.20.100.6286
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory