{"id":"CVE-2026-26052","kind":"vulnerability","aliases":["CVE-2026-26052"],"related":[],"title":"Intel Graphics Driver installers: inherited permissions let local users escalate privileges","description":"Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Graphics Driver software installers inherit insecure file permissions. A local user with an account can use this to gain higher privileges on the machine.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["graphics-driver","intel","vendor","windows"],"not_affected_if":["no-intel-graphics","single-trusted-user"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T17:17:39+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","triaged_at":"2026-11-10T17:24:33+00:00","updated_at":"2026-11-10T17:24:33+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T17:24:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel Graphics Driver installers: inherited permissions let local users escalate privileges","impact":"high","summary":"Some Intel Graphics Driver software installers inherit insecure file permissions. A local user with an account can use this to gain higher privileges on the machine.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["intel","windows","graphics-driver"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Find Intel's security advisory for CVE-2026-26052 to name affected driver versions and the fixed release.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-intel-graphics","single-trusted-user"],"who_is_affected":"Machines with Intel graphics drivers installed, where a local user without admin rights can log in. The sources do not name the affected driver versions or installers. Systems with no Intel graphics driver installer on them, or with only trusted local users, are less exposed.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000678,"input_tokens":4652,"output_tokens":426,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-26052':14A,17A '3':63C 'access':97C 'account':39B 'activ':109C 'adversari':74C 'allow':67C 'applic':65C 'attack':84C,99C 'authent':77C 'avail':123C,138C 'combin':79C 'complex':83C 'confidenti':118C,133C 'cve':12A,15A 'driver':3A,20B,27B,58C 'enabl':86C 'escal':10A,69C,87C 'file':32B 'gain':44B 'graphic':2A,19B,26B,57C 'graphics-driv':18B 'high':82C,119C,121C,124C 'higher':45B 'impact':116C,140C 'inherit':5A,30B,51C 'insecur':31B,50C 'instal':4A,29B,60C 'integr':120C,135C 'intel':1A,21B,25B,55C 'interact':111C 'intern':105C 'knowledg':106C 'let':7A 'local':8A,35B,96C 'machin':49B 'may':66C,85C,92C,115C 'none':134C,136C,139C 'occur':94C 'permiss':6A,33B,52C 'potenti':93C,113C 'present':102C 'privileg':11A,46B,71C,89C 'r':56C 'requir':100C,108C 'result':91C,129C 'ring':62C 'softwar':28B,59C,73C 'special':104C 'subsequ':131C 'system':128C,132C 'unprivileg':72C 'use':41B 'user':9A,36B,64C,78C,110C 'vendor':22B 'via':95C 'vulner':114C,127C 'window':23B 'within':61C 'without':103C","nicknames":[],"mitigations":[],"who_affected":"Machines with Intel graphics drivers installed, where a local user without admin rights can log in. The sources do not name the affected driver versions or installers. Systems with no Intel graphics driver installer on them, or with only trusted local users, are less exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["graphicsdriver","intel","medium","vendor","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-26052':14A,17A 'cve':12A,15A 'driver':3A 'escal':10A 'graphic':2A 'inherit':5A 'instal':4A 'intel':1A 'let':7A 'local':8A 'permiss':6A 'privileg':11A 'user':9A","search_b":"'account':39B 'driver':20B,27B 'file':32B 'gain':44B 'graphic':19B,26B 'graphics-driv':18B 'higher':45B 'inherit':30B 'insecur':31B 'instal':29B 'intel':21B,25B 'local':35B 'machin':49B 'permiss':33B 'privileg':46B 'softwar':28B 'use':41B 'user':36B 'vendor':22B 'window':23B","search_c":"'3':63C 'access':97C 'activ':109C 'adversari':74C 'allow':67C 'applic':65C 'attack':84C,99C 'authent':77C 'avail':123C,138C 'combin':79C 'complex':83C 'confidenti':118C,133C 'driver':58C 'enabl':86C 'escal':69C,87C 'graphic':57C 'high':82C,119C,121C,124C 'impact':116C,140C 'inherit':51C 'insecur':50C 'instal':60C 'integr':120C,135C 'intel':55C 'interact':111C 'intern':105C 'knowledg':106C 'local':96C 'may':66C,85C,92C,115C 'none':134C,136C,139C 'occur':94C 'permiss':52C 'potenti':93C,113C 'present':102C 'privileg':71C,89C 'r':56C 'requir':100C,108C 'result':91C,129C 'ring':62C 'softwar':59C,73C 'special':104C 'subsequ':131C 'system':128C,132C 'unprivileg':72C 'user':64C,78C,110C 'via':95C 'vulner':114C,127C 'within':61C 'without':103C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-26052","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26052","severity":null,"published_at":"2026-11-10T17:17:39+00:00","modified_at":"2026-11-10T17:17:39+00:00","first_seen_at":"2026-11-10T17:22:41+00:00","fetched_at":"2026-11-10T17:22:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}