How severe is CVE-2021-0121?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Intel Iris Xe Max Dedicated Graphics

CVE-2021-0121

Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Iris_xe_max_dedicated_graphics
Microsoft Windows_10
N/a Intel(r) Iris(r) Xe Max Dedicated Graphics Drivers For Windows 10 — versions before version 27.20.100.9466

References

secure@intel.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-0121?: CVE-2021-0121 is a high-severity vulnerability in Intel Iris Xe Max Dedicated Graphics. CVSS score: 7.8/10. Published 2021-11-17.
How severe is CVE-2021-0121?: High severity. CVSS v3 base score is 7.8 out of 10.