Read the docs
TI-2019-00111 Aliases CVE-2019-0128GHSA-m77g-j8m8-3c85

Access control flaw in Intel Chipset Device Software Advisory

Priority LOW 35CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.

Why it matters now

EPSS 0.00502 43rd percentileScored 2026-11-07
Fix Fixed Intel(R) Chipset Device Software (INF Update Utility) Advisory: 10.1.1.45.

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel(R) Chipset Device Software (INF Update Utility) Advisorybefore 10.1.1.45.10.1.1.45.Patch availableCNA
  • Intel(R) Chipset Device Software (INF Update Utility) Advisory Vendor— Affected before 10.1.1.45. Fixed in 10.1.1.45. Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:intel:chipset_device_software:*:*:*:*:*:*:*:*before 10.1.1.45VulnerableIntel
  • cpe:2.3:a:intel:chipset_device_software:*:*:*:*:*:*:*:* Versions before 10.1.1.45 Vulnerable ·Intel

Remediation

  • Fix · CNA Intel(R) Chipset Device Software (INF Update Utility) Advisory Fixed in 10.1.1.45.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-0128
  2. 2026-10-03 Alias added: GHSA-m77g-j8m8-3c85

References

Patch 1

Advisory 1

  • TI-2023-13251 Incorrect default permissions in Intel Chipset Driver Software CVSS 3.1HIGH 7.8
  • TI-2023-12934 Uncontrolled search path in Intel Chipset Device Software CVSS 3.1HIGH 7.8
  • TI-2023-10636 Improper access control in Intel Chipset Driver Software CVSS 3.1HIGH 7.8
  • TI-2024-14492 Uncontrolled search path in Intel Chipset Device Software CVSS 3.1HIGH 7.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences