CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2017-5696
https://notcve.org/view.php?id=CVE-2017-5696
Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access. Una ruta de búsqueda no fiable en Intel Graphics Driver 15.40.x.x, 15.45.x.x y 21.20.x.x permite que un usuario sin privilegios eleve sus privilegios mediante acceso local. • https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00080&languageid=en-fr • CWE-426: Untrusted Search Path •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 1CVE-2017-5717 – Intel Content Protection HECI Service - Type Confusion Privilege Escalation
https://notcve.org/view.php?id=CVE-2017-5717
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access. Confusión de tipos en Content Protection HECI Service en Intel Graphics Driver permite que usuarios sin privilegios eleven privilegios mediante acceso local. The Intel Content Protection HECI Service exposes a DCOM object to all users and most sandboxes (such as Edge LPAC and Chrome GPU). It has a type confusion vulnerability which can be used to elevate to SYSTEM privileges. • https://www.exploit-db.com/exploits/43373 https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00095&languageid=en-fr • CWE-704: Incorrect Type Conversion or Cast •