Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-0514

Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.

Published

2020-03-12T20:15:12.580

Last Modified

2024-11-21T04:53:38.927

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-276

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	intel	graphics_driver	< 15.45.30.5103	Yes
Application	intel	graphics_driver	< 26.20.100.7463	Yes

References

https://security.netapp.com/advisory/ntap-20200320-0003/ Third Party Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html Vendor Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20200320-0003/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)