3.3

CVE-2018-12224

Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IntelGraphics Driver Version15.33.43.4425
   MicrosoftWindows Version-
IntelGraphics Driver Version15.33.45.4653
   MicrosoftWindows Version-
IntelGraphics Driver Version15.33.46.4885
   MicrosoftWindows Version-
IntelGraphics Driver Version15.36.26.4294
   MicrosoftWindows Version-
IntelGraphics Driver Version15.36.28.4332
   MicrosoftWindows Version-
IntelGraphics Driver Version15.36.31.4414
   MicrosoftWindows Version-
IntelGraphics Driver Version15.36.33.4578
   MicrosoftWindows Version-
IntelGraphics Driver Version15.36.34.4889
   MicrosoftWindows Version-
IntelGraphics Driver Version15.40.34.4624
   MicrosoftWindows Version-
IntelGraphics Driver Version15.40.36.4703
   MicrosoftWindows Version-
IntelGraphics Driver Version15.40.37.4835
   MicrosoftWindows Version-
IntelGraphics Driver Version15.40.38.4963
   MicrosoftWindows Version-
IntelGraphics Driver Version15.40.41.5058
   MicrosoftWindows Version-
IntelGraphics Driver Version15.45.18.4664
   MicrosoftWindows Version-
IntelGraphics Driver Version15.45.19.4678
   MicrosoftWindows Version-
IntelGraphics Driver Version15.45.21.4821
   MicrosoftWindows Version-
IntelGraphics Driver Version15.45.23.4860
   MicrosoftWindows Version-
IntelGraphics Driver Version24.20.100.6025
   MicrosoftWindows Version-
IntelGraphics Driver Version24.20.100.6094
   MicrosoftWindows Version-
IntelGraphics Driver Version24.20.100.6136
   MicrosoftWindows Version-
IntelGraphics Driver Version24.20.100.6194
   MicrosoftWindows Version-
IntelGraphics Driver Version24.20.100.6229
   MicrosoftWindows Version-
IntelGraphics Driver Version24.20.100.6286
   MicrosoftWindows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.094
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.