{"id": "CVE-2020-12369", "bulletinFamily": "NVD", "title": "CVE-2020-12369", "description": "Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable escalation of privilege via local access.", "published": "2021-02-17T14:15:00", "modified": "2021-02-22T19:44:00", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12369", "reporter": "cve@mitre.org", "references": ["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html"], "cvelist": ["CVE-2020-12369"], "type": "cve", "lastseen": "2021-02-23T14:29:48", "edition": 2, "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "lenovo", "idList": ["LENOVO:PS500393-INTEL-GRAPHICS-DRIVERS-ADVISORY-NOSID"]}, {"type": "hp", "idList": ["HP:C07023592"]}], "modified": "2021-02-23T14:29:48", "rev": 2}, "score": {"value": 5.5, "vector": "NONE", "modified": "2021-02-23T14:29:48", "rev": 2}, "vulnersScore": 5.5}, "cpe": [], "affectedSoftware": [{"cpeName": "intel:graphics_drivers", "name": "intel graphics drivers", "operator": "lt", "version": "26.20.100.8336"}], "affectedConfiguration": [], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:intel:graphics_drivers:26.20.100.8336:*:*:*:*:*:*:*", "versionEndExcluding": "26.20.100.8336", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html", "refsource": "MISC", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html"}], "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "cpe23": [], "cwe": ["CWE-787"], "scheme": null}

{"lenovo": [{"lastseen": "2021-02-23T15:28:28", "bulletinFamily": "info", "cvelist": ["CVE-2020-0518", "CVE-2020-12362", "CVE-2020-12366", "CVE-2020-0521", "CVE-2020-12367", "CVE-2020-12373", "CVE-2020-12372", "CVE-2020-0544", "CVE-2020-12385", "CVE-2020-12384", "CVE-2020-12369", "CVE-2020-12371", "CVE-2020-12363", "CVE-2020-8678", "CVE-2020-12370", "CVE-2020-12386", "CVE-2020-12368", "CVE-2020-24448", "CVE-2020-12361", "CVE-2020-24450", "CVE-2020-12365", "CVE-2020-12364"], "description": "**Lenovo Security Advisory: **LEN-51723\n\n**Potential Impact: **Privilege escalation, denial of service, information disclosure\n\n**Severity: **High\n\n**Scope of Impact: **Industry-wide\n\n**CVE Identifier: **CVE-2020-0518, CVE-2020-0521, CVE-2020-0544, CVE-2020-12361, CVE-2020-12362, CVE-2020-12363, CVE-2020-12364, CVE-2020-12365, CVE-2020-12366, CVE-2020-12367, CVE-2020-12368, CVE-2020-12369, CVE-2020-12370, CVE-2020-12371, CVE-2020-12372, CVE-2020-12373, CVE-2020-12384, CVE-2020-12385, CVE-2020-12386, CVE-2020-24448, CVE-2020-24450, CVE-2020-8678\n\n**Summary Description:**\n\nIntel reported potential security vulnerabilities in some Intel Graphics Drivers that may allow escalation of privilege, denial of service and/or information disclosure.\n\n**Mitigation Strategy for Customers (what you should do to protect yourself):**\n\nIntel recommends updating the Intel Graphics Drivers to the version (or newer) indicated for your model in the Product Impact section.\n", "edition": 5, "modified": "2021-02-18T13:50:47", "published": "2021-02-09T16:58:30", "id": "LENOVO:PS500393-INTEL-GRAPHICS-DRIVERS-ADVISORY-NOSID", "href": "https://support.lenovo.com/us/en/product_security/ps500393-intel-graphics-drivers-advisory", "title": "Intel Graphics Drivers Advisory - Lenovo Support US", "type": "lenovo", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}}], "hp": [{"lastseen": "2021-02-23T15:28:36", "bulletinFamily": "software", "cvelist": ["CVE-2020-0518", "CVE-2020-12362", "CVE-2020-12366", "CVE-2020-0521", "CVE-2020-12367", "CVE-2020-12373", "CVE-2020-12372", "CVE-2020-0544", "CVE-2020-12385", "CVE-2020-12384", "CVE-2020-12369", "CVE-2020-12371", "CVE-2020-12363", "CVE-2020-8678", "CVE-2020-12370", "CVE-2020-12386", "CVE-2020-12368", "CVE-2020-24448", "CVE-2020-12361", "CVE-2020-24450", "CVE-2020-12365", "CVE-2020-12364"], "description": "## Potential Security Impact\nEscalation of Privilege, Denial of Service, and Information Disclosure\n\n**Source**: HP, HP Product Security Response Team (PSRT) \n\n**Reported By**: Intel \n\n## VULNERABILITY SUMMARY\nIntel has informed HP of a potential security vulnerabilities identified in some Intel\u00ae Graphics Drivers which may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities.\n\n## RESOLUTION\nIntel has released updates to mitigate the potential vulnerabilities. HP has identified the affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. See the affected platforms listed below.\n\nNewer versions may become available and identified minimum versions may become obsolete. If a SoftPaq Link becomes invalid, check the HP Customer Support - Software and Driver Downloads site to obtain the latest update for your product model. \n\nHP recommends keeping your system up to date with the latest firmware and software.\n", "edition": 2, "modified": "2021-02-09T00:00:00", "published": "2021-02-09T00:00:00", "id": "HP:C07023592", "href": "https://support.hp.com/us-en/document/c07023592", "title": "HPSBHF03719 rev. 1 - Intel\u00ae Graphics Drivers February 2021 Security Update", "type": "hp", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}}]}