« Back to list

CVE-2018-18090

Status: ModifiedMedium (5.5)—

Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2018-18090",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "Intel Corporation",
          "product": "Intel(R) Graphics Driver for Windows",
          "versions": [
            {
              "status": "affected",
              "version": "Multiple versions."
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-03-14T20:29:01.443",
  "references": [
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-25084",
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-25084",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access."
    },
    {
      "lang": "es",
      "value": "Lectura fuera de límites en igdkm64.sys en Intel(R) Graphics Driver for Windows* en versiones anteriores a la 10.18.x.5059 (también conocido como 15.33.x.5059), 10.18.x.5057 (también conocido como 15.36.x.5057), 20.19.x.5063 (también conocido como 15.40.x.5063) 21.20.x.5064 (también conocido como 15.45.x.5064) y 24.20.100.6373 podría permitir que un usuario autenticado provoque una denegación de servicio (DoS) mediante acceso local."
    }
  ],
  "lastModified": "2026-06-17T01:46:45.783",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46DA06DD-52CA-4FA9-93A1-A52DE84C1644"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBE1FEDC-1727-4C1E-BD5B-2ADF8C6B5DAD"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EB29EF4-D012-445B-8AD0-329EB417A9A2"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C6F6A0E-92CE-4ECD-97D4-74625905CD67"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2681B1E3-325E-4464-818A-25A699C6E0F0"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8256C6E1-9D66-4BB4-A016-28D3C61D32F0"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6FD7B20-B590-4769-B9E4-F729FE69C458"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E14987BE-67FE-47CF-9DAC-403C5E16CFC7"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80F4313B-7638-433A-B0DF-C371AE56CFFC"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B53F3860-B5BC-47DB-A6C1-CF1C805C8784"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F5F99CA-043F-4EFC-B0C8-13A1208DC7EA"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74217D7F-1EEC-4219-9DC4-57D143D1CE0C"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE465097-C835-4D95-96A8-0E6C775BD11C"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7311B7AE-DF12-49BE-8D80-BBCE402C6958"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D308A31F-B73F-48D3-8C5A-5320DBBA57C4"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A50439F4-2052-4F65-B5EC-1B94321777A8"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00146320-E0B0-4660-839E-1758AA2BF8B2"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6025:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3CE3ADC-7FA5-4B85-B032-104AD50E6462"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6094:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1021088C-1F07-42E2-B409-1BCCBEBDF522"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6136:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F94F93C-366F-4E78-83B4-F0DBC3572E2C"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6194:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91F70FDF-1E73-4C90-93C2-4B0356F3F033"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6229:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44277329-F2A7-4C93-891B-855F765E466D"
            },
            {
              "criteria": "cpe:2.3:a:intel:graphics_driver:24.20.100.6286:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "686EA8C9-F877-40ED-8757-03811E15B0F9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}