7.8

CVE-2018-12221

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Graphics Driver Version15.33.43.4425 SwPlatformwindows
Intel ≫ Graphics Driver Version15.33.45.4653 SwPlatformwindows
Intel ≫ Graphics Driver Version15.33.46.4885 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.26.4294 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.28.4332 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.31.4414 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.33.4578 SwPlatformwindows
Intel ≫ Graphics Driver Version15.36.34.4889 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.34.4624 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.36.4703 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.37.4835 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.38.4963 SwPlatformwindows
Intel ≫ Graphics Driver Version15.40.41.5058 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.18.4664 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.19.4678 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.21.4821 SwPlatformwindows
Intel ≫ Graphics Driver Version15.45.23.4860 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6025 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6094 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6136 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6194 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6229 SwPlatformwindows
Intel ≫ Graphics Driver Version24.20.100.6286 SwPlatformwindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.147
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.