CVE-2020-8678

4 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 81.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Graphics Drivers
Timeline
PublishedFeb 17
Latest updateMay 24

Description

Improper access control for Intel(R) Graphics Drivers before version 15.45.33.5164 and 27.20.100.8280 may allow an authenticated user to potentially enable an escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDintel/graphics_drivers27.20 — 27.20.100.8280+1
▶CVEListV5intel(r)_graphics_driversbefore version 15.45.33.5164 and 27.20.100.8280

🔴Vulnerability Details

2
GHSA
GHSA-h38w-g7jw-34p6: Improper access control for Intel(R) Graphics Drivers before version 15↗2022-05-24
▶
CVEList
CVE-2020-8678: Improper access control for Intel(R) Graphics Drivers before version 15↗2021-02-17
▶

💬Community

1
Bugzilla
CVE-2019-8678 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution↗2020-09-07
▶
CVE-2020-8678 (HIGH CVSS 7.8) | Improper access control for Intel(R | cvebase.io