CVE-2019-14590

MEDIUM

Intel(R) Graphics Driver <26.20.100.7209 - Info Disclosure

Title source: llm

Description

Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20200320-0005/

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 41.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-269

Status published

Products (5)

intel/graphics_driver < 26.20.100.7209

netapp/cloud_backup

netapp/data_availability_services

netapp/solidfire_baseboard_management_controller_firmware

netapp/steelstore_cloud_integrated_storage

Published Nov 14, 2019

Tracked Since Feb 18, 2026