{"id":"CVE-2026-20880","kind":"vulnerability","aliases":["CVE-2026-20880"],"related":[],"title":"Intel Graphics Driver installers: default permissions allow local privilege escalation","description":"Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Graphics Driver software installers ship with incorrect default file permissions. A local user with an account can escalate privileges to gain full control of the system.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["graphics-driver","intel","vendor","windows"],"not_affected_if":["no-intel-graphics","no-local-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T17:17:34+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","triaged_at":"2026-11-10T17:24:30+00:00","updated_at":"2026-11-10T17:24:30+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T17:24:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel Graphics Driver installers: default permissions allow local privilege escalation","impact":"high","summary":"Some Intel Graphics Driver software installers ship with incorrect default file permissions. A local user with an account can escalate privileges to gain full control of the system.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["intel","windows","graphics-driver"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains system-level privileges and full control","analyst_note":"Check Intel's security advisory for affected driver versions, the fixed version and the installer files named, since the NVD text gives neither.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-intel-graphics","no-local-users"],"who_is_affected":"Machines with Intel graphics drivers installed from the affected installers, where a local user account exists. Exposure requires a high-complexity attack with user interaction, so attackers must already have local access. Systems without Intel graphics hardware or drivers from these installers are not affected.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000683,"input_tokens":4653,"output_tokens":435,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-20880':13A,16A '3':64C 'access':98C 'account':40B 'activ':110C 'adversari':75C 'allow':7A,68C 'applic':66C 'attack':85C,100C 'authent':78C 'avail':124C,139C 'combin':80C 'complex':84C 'confidenti':119C,134C 'control':47B 'cve':11A,14A 'default':5A,32B,52C 'driver':3A,19B,26B,59C 'enabl':87C 'escal':10A,42B,70C,88C 'file':33B 'full':46B 'gain':45B 'graphic':2A,18B,25B,58C 'graphics-driv':17B 'high':83C,120C,122C,125C 'impact':117C,141C 'incorrect':31B,51C 'instal':4A,28B,61C 'integr':121C,136C 'intel':1A,20B,24B,56C 'interact':112C 'intern':106C 'knowledg':107C 'local':8A,36B,97C 'may':67C,86C,93C,116C 'none':135C,137C,140C 'occur':95C 'permiss':6A,34B,53C 'potenti':94C,114C 'present':103C 'privileg':9A,43B,72C,90C 'r':57C 'requir':101C,109C 'result':92C,130C 'ring':63C 'ship':29B 'softwar':27B,60C,74C 'special':105C 'subsequ':132C 'system':50B,129C,133C 'unprivileg':73C 'user':37B,65C,79C,111C 'vendor':21B 'via':96C 'vulner':115C,128C 'window':22B 'within':62C 'without':104C","nicknames":[],"mitigations":[],"who_affected":"Machines with Intel graphics drivers installed from the affected installers, where a local user account exists. Exposure requires a high-complexity attack with user interaction, so attackers must already have local access. Systems without Intel graphics hardware or drivers from these installers are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["graphicsdriver","intel","medium","vendor","windows"],"campaign_type":null,"search_a":"'-2026':12A,15A '-20880':13A,16A 'allow':7A 'cve':11A,14A 'default':5A 'driver':3A 'escal':10A 'graphic':2A 'instal':4A 'intel':1A 'local':8A 'permiss':6A 'privileg':9A","search_b":"'account':40B 'control':47B 'default':32B 'driver':19B,26B 'escal':42B 'file':33B 'full':46B 'gain':45B 'graphic':18B,25B 'graphics-driv':17B 'incorrect':31B 'instal':28B 'intel':20B,24B 'local':36B 'permiss':34B 'privileg':43B 'ship':29B 'softwar':27B 'system':50B 'user':37B 'vendor':21B 'window':22B","search_c":"'3':64C 'access':98C 'activ':110C 'adversari':75C 'allow':68C 'applic':66C 'attack':85C,100C 'authent':78C 'avail':124C,139C 'combin':80C 'complex':84C 'confidenti':119C,134C 'default':52C 'driver':59C 'enabl':87C 'escal':70C,88C 'graphic':58C 'high':83C,120C,122C,125C 'impact':117C,141C 'incorrect':51C 'instal':61C 'integr':121C,136C 'intel':56C 'interact':112C 'intern':106C 'knowledg':107C 'local':97C 'may':67C,86C,93C,116C 'none':135C,137C,140C 'occur':95C 'permiss':53C 'potenti':94C,114C 'present':103C 'privileg':72C,90C 'r':57C 'requir':101C,109C 'result':92C,130C 'ring':63C 'softwar':60C,74C 'special':105C 'subsequ':132C 'system':129C,133C 'unprivileg':73C 'user':65C,79C,111C 'via':96C 'vulner':115C,128C 'within':62C 'without':104C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:34+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-20880","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20880","severity":null,"published_at":"2026-11-10T17:17:34+00:00","modified_at":"2026-11-10T17:17:34+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","fetched_at":"2026-11-10T17:22:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}