CVE-2020-0515

published 2020-03-12

CVE-2020-0515: Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117…

Priority P3 36 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access

Affected

11 ranges

Vendor	Product	Version range	Fixed in
intel	graphics_driver	>= 15.33 < 15.33.49.5100	15.33.49.5100
intel	graphics_driver	>= 15.36 < 15.36.38.5117	15.36.38.5117
intel	graphics_driver	>= 15.40 < 15.40.44.5107	15.40.44.5107
intel	graphics_driver	>= 15.45 < 15.45.30.5103	15.45.30.5103
intel	graphics_driver	>= 26.20 < 26.20.100.7584	26.20.100.7584
intel	intel_graphics_drivers	—	—
intel	intel_graphics_drivers	—	—
intel	intel_graphics_drivers	—	—
intel	intel_graphics_drivers	—	—
intel	intel_graphics_drivers	—	—
intel	intel_graphics_drivers	—	—

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-427