What is CVE-2020-0508?

CVE-2020-0508 is a high-severity vulnerability in Intel Graphics Driver, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2020-03-12.

How severe is CVE-2020-0508?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Intel Graphics Driver

CVE-2020-0508

Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.003 (24.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Graphics_driver
Intel Intel(r) Graphics Drivers — versions before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)
secure@intel.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-0508?: CVE-2020-0508 is a high-severity vulnerability in Intel Graphics Driver, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2020-03-12.
How severe is CVE-2020-0508?: High severity. CVSS v3 base score is 7.8 out of 10.