First published: Tue Mar 12 2019(Updated: )
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Graphics Driver | =15.33.43.4425 | |
Intel Graphics Driver | =15.33.45.4653 | |
Intel Graphics Driver | =15.33.46.4885 | |
Intel Graphics Driver | =15.36.26.4294 | |
Intel Graphics Driver | =15.36.28.4332 | |
Intel Graphics Driver | =15.36.31.4414 | |
Intel Graphics Driver | =15.36.33.4578 | |
Intel Graphics Driver | =15.36.34.4889 | |
Intel Graphics Driver | =15.40.34.4624 | |
Intel Graphics Driver | =15.40.36.4703 | |
Intel Graphics Driver | =15.40.37.4835 | |
Intel Graphics Driver | =15.40.38.4963 | |
Intel Graphics Driver | =15.40.41.5058 | |
Intel Graphics Driver | =15.45.18.4664 | |
Intel Graphics Driver | =15.45.19.4678 | |
Intel Graphics Driver | =15.45.21.4821 | |
Intel Graphics Driver | =15.45.23.4860 | |
Intel Graphics Driver | =24.20.100.6025 | |
Intel Graphics Driver | =24.20.100.6094 | |
Intel Graphics Driver | =24.20.100.6136 | |
Intel Graphics Driver | =24.20.100.6194 | |
Intel Graphics Driver | =24.20.100.6229 | |
Intel Graphics Driver | =24.20.100.6286 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-12223 is a vulnerability that allows an unprivileged user to escalate their privileges.
CVE-2018-12223 has a severity rating of 6.3, which is considered medium.
CVE-2018-12223 affects Intel Graphics Driver versions 15.33.x.5059, 15.33.x.5057, 20.19.x.5063, 21.20.x.5064, and 24.20.100.6373.
CVE-2018-12223 can be exploited by an unprivileged user to escalate their privileges.
More information about CVE-2018-12223 can be found in the Lenovo product security advisory and the Intel Security Advisory.