WID-SEC-W-2026-4484

Vulnerability from csaf_certbund - Published: 2026-11-10 23:00 - Updated: 2026-11-10 23:00
Summary
Intel Graphics Driver: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Intel ist ein Hersteller von Grafikkarten. Ein Grafiktreiber, ist eine Software, die eine Interaktion mit angeschlossenen, eingebauten (Hardware) oder virtuellen Geräten ermöglicht.
Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Graphics Driver ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Berechtigungen zu erweitern oder beliebigen Code auszuführen.
Betroffene Betriebssysteme: - Hardware Appliance - Sonstiges - UNIX - Windows
CVE-2026-20756
Affected products
Product Identifier Version Remediation
Intel Graphics Driver Data Center GPU Flex Series <32.0.101.8331
Intel / Graphics Driver
 Data Center GPU Flex Series <32.0.101.8331
Intel Graphics Driver 7th-10th Gen Core processor <31.0.101.2141
Intel / Graphics Driver
 7th-10th Gen Core processor <31.0.101.2141
Intel Graphics Driver Arc <32.0.101.8629
Intel / Graphics Driver
 Arc <32.0.101.8629
Intel Graphics Driver Arc Pro <32.0.101.8517
Intel / Graphics Driver
 Arc Pro <32.0.101.8517
Intel Graphics Driver Atom, Pentium, Celeron processors <31.0.101.2141
Intel / Graphics Driver
 Atom, Pentium, Celeron processors <31.0.101.2141
Lenovo Computer
Lenovo
 cpe:/h:lenovo:computer:- —
Dell Computer
Dell
 cpe:/o:dell:dell_computer:- —
Intel Graphics Driver Arc <32.0.101.8801
Intel / Graphics Driver
 Arc <32.0.101.8801
Intel Graphics Driver Arc Pro <32.0.101.8804
Intel / Graphics Driver
 Arc Pro <32.0.101.8804
CVE-2026-20798
Affected products
Known affected 9 products, the same list as for CVE-2026-20756
CVE-2026-20880
Affected products
Known affected 9 products, the same list as for CVE-2026-20756
CVE-2026-21407
Affected products
Known affected 9 products, the same list as for CVE-2026-20756
CVE-2026-26052
Affected products
Known affected 9 products, the same list as for CVE-2026-20756
CVE-2026-33270
Affected products
Product Identifier Version Remediation
Intel Graphics Driver Arc <32.0.101.8629
Intel / Graphics Driver
 Arc <32.0.101.8629
Intel Graphics Driver Arc Pro <32.0.101.8517
Intel / Graphics Driver
 Arc Pro <32.0.101.8517
Lenovo Computer
Lenovo
 cpe:/h:lenovo:computer:- —
Dell Computer
Dell
 cpe:/o:dell:dell_computer:- —
Intel Graphics Driver Arc <32.0.101.8801
Intel / Graphics Driver
 Arc <32.0.101.8801
Intel Graphics Driver Arc Pro <32.0.101.8804
Intel / Graphics Driver
 Arc Pro <32.0.101.8804
Intel Graphics Driver 11th-14th Gen Core processors <32.0.101.7088
Intel / Graphics Driver
 11th-14th Gen Core processors <32.0.101.7088
CVE-2026-56438
Affected products
Known affected 7 products, the same list as for CVE-2026-33270
CVE-2026-57884
Affected products
Known affected 7 products, the same list as for CVE-2026-33270
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Intel ist ein Hersteller von Grafikkarten. Ein Grafiktreiber, ist eine Software, die eine Interaktion mit angeschlossenen, eingebauten (Hardware) oder virtuellen Ger\u00e4ten erm\u00f6glicht.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Graphics Driver ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, Berechtigungen zu erweitern oder beliebigen Code auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Hardware Appliance\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-4484 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4484.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-4484 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4484"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory 01440 vom 2026-11-10",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01440.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory 01513 vom 2026-11-10",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01513.html"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-217851 vom 2026-11-11",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-217851"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2026-363 vom 2026-11-10",
        "url": "https://www.dell.com/support/kbdoc/de-de/000499184/dsa-2026-363-security-update-for-dell-client-platform-for-intel-graphics-advisory"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-225962 vom 2026-11-11",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-225962"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2026-213 vom 2026-11-11",
        "url": "https://www.dell.com/support/kbdoc/de-de/000501818/dsa-2026-213"
      }
    ],
    "source_lang": "en-US",
    "title": "Intel Graphics Driver: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-11-10T23:00:00.000+00:00",
      "generator": {
        "date": "2026-11-11T14:23:13.876+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.7.0"
        }
      },
      "id": "WID-SEC-W-2026-4484",
      "initial_release_date": "2026-11-10T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-11-10T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Computer",
            "product": {
              "name": "Dell Computer",
              "product_id": "T056167",
              "product_identification_helper": {
                "cpe": "cpe:/o:dell:dell_computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Arc \u003c32.0.101.8629",
                "product": {
                  "name": "Intel Graphics Driver Arc \u003c32.0.101.8629",
                  "product_id": "T062776"
                }
              },
              {
                "category": "product_version",
                "name": "Arc 32.0.101.8629",
                "product": {
                  "name": "Intel Graphics Driver Arc 32.0.101.8629",
                  "product_id": "T062776-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:arc__32.0.101.8629"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Arc Pro \u003c32.0.101.8517",
                "product": {
                  "name": "Intel Graphics Driver Arc Pro \u003c32.0.101.8517",
                  "product_id": "T062777"
                }
              },
              {
                "category": "product_version",
                "name": "Arc Pro 32.0.101.8517",
                "product": {
                  "name": "Intel Graphics Driver Arc Pro 32.0.101.8517",
                  "product_id": "T062777-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:arc_pro__32.0.101.8517"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Data Center GPU Flex Series \u003c32.0.101.8331",
                "product": {
                  "name": "Intel Graphics Driver Data Center GPU Flex Series \u003c32.0.101.8331",
                  "product_id": "T062778"
                }
              },
              {
                "category": "product_version",
                "name": "Data Center GPU Flex Series 32.0.101.8331",
                "product": {
                  "name": "Intel Graphics Driver Data Center GPU Flex Series 32.0.101.8331",
                  "product_id": "T062778-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:data_center_gpu_flex_series__32.0.101.8331"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "7th-10th Gen Core processor \u003c31.0.101.2141",
                "product": {
                  "name": "Intel Graphics Driver 7th-10th Gen Core processor \u003c31.0.101.2141",
                  "product_id": "T062779"
                }
              },
              {
                "category": "product_version",
                "name": "7th-10th Gen Core processor 31.0.101.2141",
                "product": {
                  "name": "Intel Graphics Driver 7th-10th Gen Core processor 31.0.101.2141",
                  "product_id": "T062779-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:7th-10th_gen_core_processor__31.0.101.2141"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Atom, Pentium, Celeron processors \u003c31.0.101.2141",
                "product": {
                  "name": "Intel Graphics Driver Atom, Pentium, Celeron processors \u003c31.0.101.2141",
                  "product_id": "T062781"
                }
              },
              {
                "category": "product_version",
                "name": "Atom, Pentium, Celeron processors 31.0.101.2141",
                "product": {
                  "name": "Intel Graphics Driver Atom, Pentium, Celeron processors 31.0.101.2141",
                  "product_id": "T062781-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:atom_pentium_celeron_processors__31.0.101.2141"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Arc \u003c32.0.101.8801",
                "product": {
                  "name": "Intel Graphics Driver Arc \u003c32.0.101.8801",
                  "product_id": "T062782"
                }
              },
              {
                "category": "product_version",
                "name": "Arc 32.0.101.8801",
                "product": {
                  "name": "Intel Graphics Driver Arc 32.0.101.8801",
                  "product_id": "T062782-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:arc__32.0.101.8801"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Arc Pro \u003c32.0.101.8804",
                "product": {
                  "name": "Intel Graphics Driver Arc Pro \u003c32.0.101.8804",
                  "product_id": "T062783"
                }
              },
              {
                "category": "product_version",
                "name": "Arc Pro 32.0.101.8804",
                "product": {
                  "name": "Intel Graphics Driver Arc Pro 32.0.101.8804",
                  "product_id": "T062783-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:arc_pro__32.0.101.8804"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "11th-14th Gen Core processors \u003c32.0.101.7088",
                "product": {
                  "name": "Intel Graphics Driver 11th-14th Gen Core processors \u003c32.0.101.7088",
                  "product_id": "T062784"
                }
              },
              {
                "category": "product_version",
                "name": "11th-14th Gen Core processors 32.0.101.7088",
                "product": {
                  "name": "Intel Graphics Driver 11th-14th Gen Core processors 32.0.101.7088",
                  "product_id": "T062784-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:intel:graphic_driver:11th-14th_gen_core_processors__32.0.101.7088"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Graphics Driver"
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo Computer",
            "product": {
              "name": "Lenovo Computer",
              "product_id": "T048897",
              "product_identification_helper": {
                "cpe": "cpe:/h:lenovo:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20756",
      "product_status": {
        "known_affected": [
          "T062778",
          "T062779",
          "T062776",
          "T062777",
          "T062781",
          "T048897",
          "T056167",
          "T062782",
          "T062783"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-20756"
    },
    {
      "cve": "CVE-2026-20798",
      "product_status": {
        "known_affected": [
          "T062778",
          "T062779",
          "T062776",
          "T062777",
          "T062781",
          "T048897",
          "T056167",
          "T062782",
          "T062783"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-20798"
    },
    {
      "cve": "CVE-2026-20880",
      "product_status": {
        "known_affected": [
          "T062778",
          "T062779",
          "T062776",
          "T062777",
          "T062781",
          "T048897",
          "T056167",
          "T062782",
          "T062783"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-20880"
    },
    {
      "cve": "CVE-2026-21407",
      "product_status": {
        "known_affected": [
          "T062778",
          "T062779",
          "T062776",
          "T062777",
          "T062781",
          "T048897",
          "T056167",
          "T062782",
          "T062783"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-21407"
    },
    {
      "cve": "CVE-2026-26052",
      "product_status": {
        "known_affected": [
          "T062778",
          "T062779",
          "T062776",
          "T062777",
          "T062781",
          "T048897",
          "T056167",
          "T062782",
          "T062783"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-26052"
    },
    {
      "cve": "CVE-2026-33270",
      "product_status": {
        "known_affected": [
          "T062776",
          "T062777",
          "T048897",
          "T056167",
          "T062782",
          "T062783",
          "T062784"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-33270"
    },
    {
      "cve": "CVE-2026-56438",
      "product_status": {
        "known_affected": [
          "T062776",
          "T062777",
          "T048897",
          "T056167",
          "T062782",
          "T062783",
          "T062784"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-56438"
    },
    {
      "cve": "CVE-2026-57884",
      "product_status": {
        "known_affected": [
          "T062776",
          "T062777",
          "T048897",
          "T056167",
          "T062782",
          "T062783",
          "T062784"
        ]
      },
      "release_date": "2026-11-10T23:00:00.000+00:00",
      "title": "CVE-2026-57884"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.