CVE-2018-12215
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Intel(R) Graphics Driver for Windows contains insufficient input validation in the Kernel Mode Driver. A privileged user can exploit this locally to cause a denial of service.
Risk Assessment
A privileged local user can crash or hang the graphics subsystem, potentially disrupting workstation availability.
Recommendation
Update the Intel Graphics Driver for Windows to a version newer than those listed (e.g., 24.20.100.6373 or later) and limit privileged account access to the minimum necessary.
Other vulnerabilities in Intel Graphics Driver for Windows
See all- CVE-2018-18091Medium
Intel(R) Graphics Driver for Windows contains a use-after-free in the Kernel Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-18090Medium
Intel(R) Graphics Driver for Windows contains an out-of-bounds read in igdkm64.sys. An authenticated user can potentially enable denial of service via local access.
- CVE-2018-18089Medium
Intel(R) Graphics Driver for Windows contains multiple out-of-bounds reads in igdkm64.sys. An authenticated user can potentially enable information disclosure via local access.
- CVE-2018-12223Medium
Intel(R) Graphics Driver for Windows contains insufficient access control in the User Mode Driver. An unprivileged user can potentially escape from a virtual machine guest-to-host via local access.
- CVE-2018-12222Low
Insufficient input validation in the Kernel Mode Driver of Intel(R) Graphics Driver for Windows allows an unprivileged user to cause an out-of-bounds memory read via local access.
- CVE-2018-12218Low
Unhandled exception in the User Mode Driver of Intel(R) Graphics Driver for Windows allows an unprivileged user to cause a memory leak via local access.
- CVE-2018-12213Medium
Intel(R) Graphics Driver for Windows contains potential memory corruption in the Kernel Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-12211Medium
Intel(R) Graphics Driver for Windows contains insufficient input validation in the User Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
- CVE-2018-12210Medium
Intel(R) Graphics Driver for Windows contains multiple pointer dereferences in the User Mode Driver. An unprivileged user can potentially cause a denial of service via local access.
Original NVD description (English source)
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS