« Volver al listado

CVE-2018-18089

Estado: ModificadaMedia (5.5)—

Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-18089",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "Intel Corporation",
          "product": "Intel(R) Graphics Driver for Windows",
          "versions": [
            {
              "status": "affected",
              "version": "Multiple versions."
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-03-14T20:29:01.427",
  "references": [
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-25084",
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-25084",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access."
    },
    {
      "lang": "es",
      "value": "Múltiples lecturas fuera de límites en igdkm64.sys en Intel(R) Graphics Driver for Windows* en versiones anteriores a la 10.18.x.5059 (también conocido como 15.33.x.5059), 10.18.x.5057 (también conocido como 15.36.x.5057), 20.19.x.5063 (también conocido como 15.40.x.5063) 21.20.x.5064 (también conocido como 15.45.x.5064) y 24.20.100.6373 podrían permitir que un usuario autenticado provoque una divulgación de información mediante acceso local."
    }
  ],
  "lastModified": "2026-06-17T01:46:45.660",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46DA06DD-52CA-4FA9-93A1-A52DE84C1644"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBE1FEDC-1727-4C1E-BD5B-2ADF8C6B5DAD"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EB29EF4-D012-445B-8AD0-329EB417A9A2"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C6F6A0E-92CE-4ECD-97D4-74625905CD67"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2681B1E3-325E-4464-818A-25A699C6E0F0"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8256C6E1-9D66-4BB4-A016-28D3C61D32F0"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6FD7B20-B590-4769-B9E4-F729FE69C458"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E14987BE-67FE-47CF-9DAC-403C5E16CFC7"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80F4313B-7638-433A-B0DF-C371AE56CFFC"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B53F3860-B5BC-47DB-A6C1-CF1C805C8784"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F5F99CA-043F-4EFC-B0C8-13A1208DC7EA"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74217D7F-1EEC-4219-9DC4-57D143D1CE0C"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE465097-C835-4D95-96A8-0E6C775BD11C"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7311B7AE-DF12-49BE-8D80-BBCE402C6958"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D308A31F-B73F-48D3-8C5A-5320DBBA57C4"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A50439F4-2052-4F65-B5EC-1B94321777A8"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00146320-E0B0-4660-839E-1758AA2BF8B2"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6025:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3CE3ADC-7FA5-4B85-B032-104AD50E6462"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6094:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1021088C-1F07-42E2-B409-1BCCBEBDF522"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6136:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F94F93C-366F-4E78-83B4-F0DBC3572E2C"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6194:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91F70FDF-1E73-4C90-93C2-4B0356F3F033"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6229:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44277329-F2A7-4C93-891B-855F765E466D"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6286:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "686EA8C9-F877-40ED-8757-03811E15B0F9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}