Read the docs
TI-2018-08753 Aliases CVE-2018-12209GHSA-3rfm-qg29-8hqw

Incorrect permission assignment in Intel Graphics Driver for Windows

Priority LOW 16CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00323 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IntelIntel(R) Graphics Driver for WindowsMultiple versions.—No fix listedCNA
  • Intel(R) Graphics Driver for Windows VendorIntel Affected Multiple versions. Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:*15.33.43.4425VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:*15.33.45.4653VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:*15.33.46.4885VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:*15.36.26.4294VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:*15.36.28.4332VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:*15.36.31.4414VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:*15.36.33.4578VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:*15.36.34.4889VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:*15.40.34.4624VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:*15.40.36.4703VulnerableIntel
  • cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:* Versions 15.33.43.4425 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:* Versions 15.33.45.4653 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:* Versions 15.33.46.4885 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:* Versions 15.36.26.4294 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:* Versions 15.36.28.4332 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:* Versions 15.36.31.4414 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:* Versions 15.36.33.4578 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:* Versions 15.36.34.4889 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:* Versions 15.40.34.4624 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:* Versions 15.40.36.4703 Vulnerable ·Intel
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:windows:*:*15.40.37.4835VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:windows:*:*15.40.38.4963VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:windows:*:*15.40.41.5058VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:windows:*:*15.45.18.4664VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:windows:*:*15.45.19.4678VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:windows:*:*15.45.21.4821VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:windows:*:*15.45.23.4860VulnerableIntel
cpe:2.3:a:intel:graphics_driver:24.20.100.6025:*:*:*:*:windows:*:*24.20.100.6025VulnerableIntel
cpe:2.3:a:intel:graphics_driver:24.20.100.6094:*:*:*:*:windows:*:*24.20.100.6094VulnerableIntel
cpe:2.3:a:intel:graphics_driver:24.20.100.6136:*:*:*:*:windows:*:*24.20.100.6136VulnerableIntel
cpe:2.3:a:intel:graphics_driver:24.20.100.6194:*:*:*:*:windows:*:*24.20.100.6194VulnerableIntel
cpe:2.3:a:intel:graphics_driver:24.20.100.6229:*:*:*:*:windows:*:*24.20.100.6229VulnerableIntel
cpe:2.3:a:intel:graphics_driver:24.20.100.6286:*:*:*:*:windows:*:*24.20.100.6286VulnerableIntel
  • cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:windows:*:* Versions 15.40.37.4835 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:windows:*:* Versions 15.40.38.4963 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:windows:*:* Versions 15.40.41.5058 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:windows:*:* Versions 15.45.18.4664 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:windows:*:* Versions 15.45.19.4678 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:windows:*:* Versions 15.45.21.4821 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:windows:*:* Versions 15.45.23.4860 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:24.20.100.6025:*:*:*:*:windows:*:* Versions 24.20.100.6025 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:24.20.100.6094:*:*:*:*:windows:*:* Versions 24.20.100.6094 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:24.20.100.6136:*:*:*:*:windows:*:* Versions 24.20.100.6136 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:24.20.100.6194:*:*:*:*:windows:*:* Versions 24.20.100.6194 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:24.20.100.6229:*:*:*:*:windows:*:* Versions 24.20.100.6229 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:24.20.100.6286:*:*:*:*:windows:*:* Versions 24.20.100.6286 Vulnerable ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-12209
  2. 2026-10-03 Alias added: GHSA-3rfm-qg29-8hqw
  3. 2026-11-02 CISA SSVC decision points changed

References

Patch 1

Other 1

  • TI-2018-08764 Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions… CVSS 3.0HIGH 8.2
  • TI-2018-08760 Improper input validation in Intel Graphics Driver for Windows CVSS 3.0HIGH 8.2
  • TI-2018-08758 Memory corruption in Intel Graphics Driver for Windows CVSS 3.0HIGH 8.2
  • TI-2017-03707 Incorrect type conversion in Intel Graphics Driver CVSS 3.0HIGH 7.8
  • TI-2018-08706 Memory corruption in Intel Graphics Driver CVSS 3.0HIGH 7.8
  • TI-2019-00135 Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th… CVSS 3.1HIGH 7.8
See all 62 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences