← Back

CVE-2018-12223

nvd nist
Published: Mar 14, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.3
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Exploitability: 2.0 / Impact: 3.7
Source: NVD

Description

Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.

Affected (23)

Intel
1 product
Graphics Driver
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Intel
Graphics Driver
Version 15.33.43.4425
Graphics Driver
Version 15.33.45.4653
Graphics Driver
Version 15.33.46.4885
Graphics Driver
Version 15.36.26.4294
Graphics Driver
Version 15.36.28.4332
Graphics Driver
Version 15.36.31.4414
Graphics Driver
Version 15.36.33.4578
Graphics Driver
Version 15.36.34.4889
Graphics Driver
Version 15.40.34.4624
Graphics Driver
Version 15.40.36.4703
Graphics Driver
Version 15.40.37.4835
Graphics Driver
Version 15.40.38.4963
Graphics Driver
Version 15.40.41.5058
Graphics Driver
Version 15.45.18.4664
Graphics Driver
Version 15.45.19.4678
Graphics Driver
Version 15.45.21.4821
Graphics Driver
Version 15.45.23.4860
Graphics Driver
Version 24.20.100.6025
Graphics Driver
Version 24.20.100.6094
Graphics Driver
Version 24.20.100.6136
Graphics Driver
Version 24.20.100.6194
Graphics Driver
Version 24.20.100.6229
Graphics Driver
Version 24.20.100.6286

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (4)

Source: secure@intel.com
Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.