Insufficient Access Control in Intel Graphics Driver for Windows
CVE-2018-12209

3.3LOW

Key Information:

Vendor

Intel
Status
Intel(r) Graphics Driver For Windows
Vendor
CVE Published:
14 March 2019

What is CVE-2018-12209?

The Intel Graphics Driver for Windows contains a vulnerability that allows an unprivileged user to gain access to device configuration information through insufficient access control mechanisms. This issue affects multiple versions of the driver, potentially exposing sensitive information that should be restricted from general users. Proper safeguards are essential to prevent unauthorized access in environments relying on this driver.

Affected Version(s)

Intel(R) Graphics Driver for Windows Multiple versions.

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_CONFIRM
https://support.lenovo.com/us/en/product_security/LEN-25084
x_refsource_CONFIRM

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-12209 : Insufficient Access Control in Intel Graphics Driver for Windows