Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
Why It Matters
Analysis dossierWhy It Matters
Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
Medium
Unknown
Unknown
Risk basis: Microsoft or Microsoft-managed product relevance; No confirmed exploitation signal in current enrichment
Affected Products & Remediation
1 source-backed product- intel graphics driver · 15.33.43.4425; 15.33.45.4653; 15.33.46.4885; 15.36.26.4294; 15.36.28.4332; 15.36.31.4414; 15.36.33.4578; 15.36.34.4889; 15.40.34.4624; 15.40.36.4703; 15.40.37.4835; 15.40.38.4963; 15.40.41.5058; 15.45.18.4664; 15.45.19.4678; 15.45.21.4821; 15.45.23.4860; 24.20.100.6025; 24.20.100.6094; 24.20.100.6136; 24.20.100.6194; 24.20.100.6229; 24.20.100.6286 · NVD CPE · Source
Vendor or catalog guidance (source)
Not provided by source
Known exploitation (source facts)
Only what a source states. Unknown means no source has said either way; it is not "not exploited".
- CISA KEV
- Unknown
- Exploited (source statement)
- Unknown
- Publicly disclosed (source)
- Unknown
Suggested hunting (rule-based inference)
SecOps Signal recommendation (rule-based inference). These steps are hunting hypotheses from the vulnerability class; they do not state or imply that exploitation occurred here or anywhere.
Matched local-privilege-escalation (CVSS AV:L, CVSS PR:L)
Exposure
- Identify hosts reporting this CVE, prioritising shared or multi-user systems.Telemetry: DeviceTvmSoftwareVulnerabilities · A local, low-privilege vector matters most where untrusted users can run code. · Rule local-privilege-escalation
Exploitation evidence
- Look for low-privileged processes spawning SYSTEM or root-level child processes on affected hosts.Telemetry: DeviceProcessEvents · Hunting hypothesis from the CVSS vector; privilege transitions are a focused starting point, not evidence of attack. · Rule local-privilege-escalation
Response
- Confirm the source-stated update on affected hosts.Telemetry: DeviceTvmSoftwareVulnerabilities · Host inventory can verify remediation. · Rule local-privilege-escalation
CISA KEV Record
CISA KEV status was not determined for this record.
Change History & Source Data
— No recorded material change
- CNA / source
- secure@intel.com
- Record status · verification
- UPDATED · NVD API
- CPE
- cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:*, cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:*
Evidence & Provenance
— No published hunting query names this record. Browse community and library queries instead.
Correlated briefings
— No published briefing references this CVE