Improper Access Control in Intel Iris Xe MAX Graphics Drivers for Windows 10
CVE-2021-0121

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Iris(r) Xe Max Dedicated Graphics Drivers For Windows 10
Vendor
CVE Published:
17 November 2021

What is CVE-2021-0121?

In the Intel Iris Xe MAX Dedicated Graphics Drivers for Windows 10, improper access control in the installer may enable authenticated users to escalate their privileges locally. This potential vulnerability arises from inadequate restrictions on access during the installation process, allowing malicious users to gain increased rights within the system.

Affected Version(s)

Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.