High severity · published Mar 12, 2020
CVE-2020-0504
Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Graphics Driver · Intel
15.40 before 15.40.44.5107; 15.45 before 15.45.30.5103; 26.20 before 26.20.100.7158 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0504
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0504
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200320-0003/
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html
More from Graphics Driver
8.2
CVE-2018-12214
Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),…
8.2
CVE-2018-12220
Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),…
8.2
CVE-2018-12216
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),…
7.8
CVE-2020-0565
Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access
7.8
CVE-2020-0520
Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to…