CVE Catalog

CVE-2018-12223

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

21th percentile - higher than 21% of all known CVEs

Summary

Intel(R) Graphics Driver for Windows contains insufficient access control in the User Mode Driver. An unprivileged user can potentially escape from a virtual machine guest-to-host via local access.

Risk Assessment

An unprivileged user in a virtual machine can escape to the host system, severely breaching isolation and security.

Recommendation

Update the Intel Graphics Driver for Windows to a version newer than those listed (e.g., 24.20.100.6373 or later) on both host and guest systems.

Other vulnerabilities in Intel Graphics Driver for Windows

See all
Original NVD description (English source)

Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS