CVE-2019-11112

moderate-risk

Published 2019-11-14

Memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver before 26.20.100.6813 (DCH) or 26.20.100.6812 may allow an authenticated user to potentially enable escalation of privilege via local access.

Do I need to act?

0.24% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (4)

Graphics Driver

Cloud Backup

Data Availability Services

Steelstore Cloud Integrated Storage

Affected Vendors

Intel Netapp

References (4)

Third Party Advisory https://security.netapp.com/advisory/ntap-20200320-0005/

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242....

Third Party Advisory https://security.netapp.com/advisory/ntap-20200320-0005/

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242....

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 1/34 · Minimal

Exposure 10/34 · Low