Linshuang Li

Name of the Vulnerable Software and Affected Versions: Intel(R) Graphics Drivers versions prior to 26.20.100.8141 Intel(R) Graphics Drivers versions prior to 15.45.32.5145 Intel(R) Graphics Drivers versions prior to 15.40.46.5144 Server Board Onboard Video Driver (affected versions not specified) Description: The issue is related to an improper conditions check in some Intel(R) Graphics Drivers, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is also associated with incorrect path handling in the firmware installer of the Server Board Onboard Video Driver for Windows, which could allow an attacker to elevate their privileges. Recommendations: For Intel(R) Graphics Drivers versions prior to 26.20.100.8141, update to version 26.20.100.8141 or later. For Intel(R) Graphics Drivers versions prior to 15.45.32.5145, update to version 15.45.32.5145 or later. For Intel(R) Graphics Drivers versions prior to 15.40.46.5144, update to version 15.40.46.5144 or later. For Server Board Onboard Video Driver, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component (affected versions not specified) Description: The issue is related to the improper handling of objects in memory by the Windows Graphics Component, allowing an attacker to potentially run processes in an elevated context. In a local attack scenario, an attacker could exploit this by running a specially crafted application to gain control over the affected system. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an elevation of privilege vulnerability. It occurs when the Windows Modules Installer improperly handles file operations. This vulnerability can be exploited by an attacker to elevate their privileges using a specially crafted application.