Intel Iris XE Graphics vulnerabilities

8 CVEs affecting Intel Iris XE Graphics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28050, published 2024-08-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-21864, published 2024-05-16. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via…
• CVE-2023-28401, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via…
• CVE-2023-28404, published 2023-11-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via…
• CVE-2023-25952, published 2023-11-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2023-29165, published 2023-11-14. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Unquoted search path or element in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-25071, published 2023-11-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via…
• CVE-2023-27305, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Incorrect default permissions in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2024-28050, published 2024-08-14. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.