CVEvulnerability
CVE-2018-12216
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.2 HIGH — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.
Affected configurations
• intel graphics driver 15.33.43.4425
• intel graphics driver 15.33.45.4653
• intel graphics driver 15.33.46.4885
• intel graphics driver 15.36.26.4294
• intel graphics driver 15.36.28.4332
• intel graphics driver 15.36.31.4414
• intel graphics driver 15.36.33.4578
• intel graphics driver 15.36.34.4889
• intel graphics driver 15.40.34.4624
• intel graphics driver 15.40.36.4703
• intel graphics driver 15.40.37.4835
• intel graphics driver 15.40.38.4963
• intel graphics driver 15.40.41.5058
• intel graphics driver 15.45.18.4664
• intel graphics driver 15.45.19.4678
• intel graphics driver 15.45.21.4821
• intel graphics driver 15.45.23.4860
• intel graphics driver 24.20.100.6025
• intel graphics driver 24.20.100.6094
• intel graphics driver 24.20.100.6136
• intel graphics driver 24.20.100.6194
• intel graphics driver 24.20.100.6229
• intel graphics driver 24.20.100.6286
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory