3.3

CVE-2018-12209

Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Graphics Driver Version15.33.43.4425 SwPlatformwindows
Intel ≫ Graphics Driver Version15.33.45.4653 SwPlatformwindows
Intel ≫ Graphics Driver Version15.33.46.4885 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.26.4294 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.28.4332 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.31.4414 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.33.4578 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.34.4889 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.34.4624 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.36.4703 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.37.4835 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.38.4963 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.41.5058 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.18.4664 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.19.4678 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.21.4821 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.23.4860 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6025 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6094 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6136 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6194 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6229 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6286 SwPlatformwindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.25
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.