{"id":"CVE-2026-20756","kind":"vulnerability","aliases":["CVE-2026-20756"],"related":[],"title":"Intel graphics driver installers: default permissions let local users escalate privileges","description":"Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Graphics Driver software installers ship with incorrect default file permissions. A local user with an account can use this to gain higher privileges on the machine.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["graphics-driver","infrastructure","intel","local-users","windows"],"not_affected_if":["no-local-user-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T17:17:33+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","triaged_at":"2026-11-10T17:24:32+00:00","updated_at":"2026-11-10T17:24:32+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T17:24:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel graphics driver installers: default permissions let local users escalate privileges","impact":"high","summary":"Some Intel Graphics Driver software installers ship with incorrect default file permissions. A local user with an account can use this to gain higher privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","windows","graphics-driver","local-users"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains higher system privileges, full control of the machine","analyst_note":"Check Intel's security advisory for this CVE for affected driver versions, the fixed version, and any remediation steps; the NVD entry alone does not name them.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-user-access"],"who_is_affected":"Machines with Intel graphics drivers installed, where a local user without admin rights can log in or run software. Systems with no Intel graphics driver installer present, or with only managed or locked-down user access, are less exposed. The sources do not name specific driver versions.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000685,"input_tokens":4653,"output_tokens":440,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-20756':14A,17A '3':68C 'access':102C 'account':44B 'activ':114C 'adversari':79C 'allow':72C 'applic':70C 'attack':89C,104C 'authent':82C 'avail':128C,143C 'combin':84C 'complex':88C 'confidenti':123C,138C 'cve':12A,15A 'default':5A,36B,56C 'driver':3A,20B,30B,63C 'enabl':91C 'escal':10A,74C,92C 'file':37B 'gain':49B 'graphic':2A,19B,29B,62C 'graphics-driv':18B 'high':87C,124C,126C,129C 'higher':50B 'impact':121C,145C 'incorrect':35B,55C 'infrastructur':21B 'instal':4A,32B,65C 'integr':125C,140C 'intel':1A,22B,28B,60C 'interact':116C 'intern':110C 'knowledg':111C 'let':7A 'local':8A,24B,40B,101C 'local-us':23B 'machin':54B 'may':71C,90C,97C,120C 'none':139C,141C,144C 'occur':99C 'permiss':6A,38B,57C 'potenti':98C,118C 'present':107C 'privileg':11A,51B,76C,94C 'r':61C 'requir':105C,113C 'result':96C,134C 'ring':67C 'ship':33B 'softwar':31B,64C,78C 'special':109C 'subsequ':136C 'system':133C,137C 'unprivileg':77C 'use':46B 'user':9A,25B,41B,69C,83C,115C 'via':100C 'vulner':119C,132C 'window':26B 'within':66C 'without':108C","nicknames":[],"mitigations":[],"who_affected":"Machines with Intel graphics drivers installed, where a local user without admin rights can log in or run software. Systems with no Intel graphics driver installer present, or with only managed or locked-down user access, are less exposed. The sources do not name specific driver versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["graphicsdriver","infrastructure","intel","localusers","medium","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-20756':14A,17A 'cve':12A,15A 'default':5A 'driver':3A 'escal':10A 'graphic':2A 'instal':4A 'intel':1A 'let':7A 'local':8A 'permiss':6A 'privileg':11A 'user':9A","search_b":"'account':44B 'default':36B 'driver':20B,30B 'file':37B 'gain':49B 'graphic':19B,29B 'graphics-driv':18B 'higher':50B 'incorrect':35B 'infrastructur':21B 'instal':32B 'intel':22B,28B 'local':24B,40B 'local-us':23B 'machin':54B 'permiss':38B 'privileg':51B 'ship':33B 'softwar':31B 'use':46B 'user':25B,41B 'window':26B","search_c":"'3':68C 'access':102C 'activ':114C 'adversari':79C 'allow':72C 'applic':70C 'attack':89C,104C 'authent':82C 'avail':128C,143C 'combin':84C 'complex':88C 'confidenti':123C,138C 'default':56C 'driver':63C 'enabl':91C 'escal':74C,92C 'graphic':62C 'high':87C,124C,126C,129C 'impact':121C,145C 'incorrect':55C 'instal':65C 'integr':125C,140C 'intel':60C 'interact':116C 'intern':110C 'knowledg':111C 'local':101C 'may':71C,90C,97C,120C 'none':139C,141C,144C 'occur':99C 'permiss':57C 'potenti':98C,118C 'present':107C 'privileg':76C,94C 'r':61C 'requir':105C,113C 'result':96C,134C 'ring':67C 'softwar':64C,78C 'special':109C 'subsequ':136C 'system':133C,137C 'unprivileg':77C 'user':69C,83C,115C 'via':100C 'vulner':119C,132C 'within':66C 'without':108C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:33+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-20756","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20756","severity":null,"published_at":"2026-11-10T17:17:33+00:00","modified_at":"2026-11-10T17:17:33+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","fetched_at":"2026-11-10T17:22:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}