6.5

CVE-2018-18091

Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Graphics Driver Version 15.33.43.4425 SwPlatform windows
Intel ≫ Graphics Driver Version 15.33.45.4653 SwPlatform windows
Intel ≫ Graphics Driver Version 15.33.46.4885 SwPlatform windows
Intel ≫ Graphics Driver Version 15.36.26.4294 SwPlatform windows
Intel ≫ Graphics Driver Version 15.36.28.4332 SwPlatform windows
Intel ≫ Graphics Driver Version 15.36.31.4414 SwPlatform windows
Intel ≫ Graphics Driver Version 15.36.33.4578 SwPlatform windows
Intel ≫ Graphics Driver Version 15.36.34.4889 SwPlatform windows
Intel ≫ Graphics Driver Version 15.40.34.4624 SwPlatform windows
Intel ≫ Graphics Driver Version 15.40.36.4703 SwPlatform windows
Intel ≫ Graphics Driver Version 15.40.37.4835 SwPlatform windows
Intel ≫ Graphics Driver Version 15.40.38.4963 SwPlatform windows
Intel ≫ Graphics Driver Version 15.40.41.5058 SwPlatform windows
Intel ≫ Graphics Driver Version 15.45.18.4664 SwPlatform windows
Intel ≫ Graphics Driver Version 15.45.19.4678 SwPlatform windows
Intel ≫ Graphics Driver Version 15.45.21.4821 SwPlatform windows
Intel ≫ Graphics Driver Version 15.45.23.4860 SwPlatform windows
Intel ≫ Graphics Driver Version 24.20.100.6025 SwPlatform windows
Intel ≫ Graphics Driver Version 24.20.100.6094 SwPlatform windows
Intel ≫ Graphics Driver Version 24.20.100.6136 SwPlatform windows
Intel ≫ Graphics Driver Version 24.20.100.6194 SwPlatform windows
Intel ≫ Graphics Driver Version 24.20.100.6229 SwPlatform windows
Intel ≫ Graphics Driver Version 24.20.100.6286 SwPlatform windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.236
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2 4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://support.lenovo.com/us/en/product_security/LEN-25084
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html
Patch
Vendor Advisory