Medium severity · published Oct 10, 2018
CVE-2018-12153
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058)…
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Graphics Driver · Intel
15.33.43.4425; 15.33.45.4653; 15.33.46.4885; 15.33.47.5059; 15.36.26.4294; 15.36.28.4332; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-12153
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-12153
seclists.org
http://seclists.org/fulldisclosure/2019/Oct/55
seclists.org
http://seclists.org/fulldisclosure/2019/Oct/56
Third Party Advisory
http://www.securityfocus.com/bid/105582
support.apple.com
https://support.apple.com/kb/HT210634
support.apple.com
https://support.apple.com/kb/HT210722
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html
More from Graphics Driver
8.2
CVE-2018-12214
Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),…
8.2
CVE-2018-12220
Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),…
8.2
CVE-2018-12216
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),…
7.8
CVE-2020-0565
Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access
7.8
CVE-2020-0520
Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to…