{"id":"CVE-2026-33270","kind":"vulnerability","aliases":["CVE-2026-33270"],"related":[],"title":"Intel Graphics Software: local user app input flaw can crash system","description":"Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Graphics Software has an input validation flaw that lets a local user-level program cause a denial of service. An attacker gets the affected system to stop working but gains no data access or code execution.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","intel-graphics","local-users","windows"],"not_affected_if":["no-intel-graphics-software","no-local-untrusted-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","triaged_at":"2026-11-10T17:24:10+00:00","updated_at":"2026-11-10T17:24:10+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T17:24:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel Graphics Software: local user app input flaw can crash system","impact":"low","summary":"Some Intel Graphics Software has an input validation flaw that lets a local user-level program cause a denial of service. An attacker gets the affected system to stop working but gains no data access or code execution.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel-graphics","windows","local-users"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local app crashes the machine via denial of service","analyst_note":"Find the affected Intel Graphics Software versions and fixed release in Intel's security advisory (intel.com/security-center) to fill how_to_check and fix.","how_to_check":"- unknown","plain_action":"","product_name":"Intel Graphics Software","needs_analyst":true,"not_affected_if":["no-intel-graphics-software","no-local-untrusted-users"],"who_is_affected":"Systems running the affected Intel Graphics Software, where an authenticated local user or application can trigger the flaw. The sources do not list the affected driver versions or the exact product ranges. Machines with no Intel graphics software installed are not affected.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000705,"input_tokens":4641,"output_tokens":481,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-33270':14A,17A '3':76C 'access':61B,110C 'adversari':87C 'affect':52B 'allow':80C 'app':6A 'applic':78C 'attack':49B,97C,112C 'authent':90C 'avail':137C,152C 'caus':43B 'code':63B 'combin':92C 'complex':96C 'confidenti':132C,147C 'crash':10A 'cve':12A,15A 'data':60B 'denial':45B,82C,100C 'enabl':99C 'execut':64B 'flaw':8A,34B 'gain':58B 'get':50B 'graphic':2A,21B,28B,72C 'high':138C 'impact':130C,154C 'improp':65C 'infrastructur':18B 'input':7A,32B,66C 'integr':134C,149C 'intel':1A,20B,27B,70C 'intel-graph':19B 'interact':125C 'intern':119C 'knowledg':120C 'let':36B 'level':41B 'local':4A,23B,38B,109C 'local-us':22B 'low':95C 'may':79C,98C,105C,129C 'none':133C,135C,148C,150C,153C 'occur':107C 'potenti':106C,127C 'present':116C 'program':42B 'r':71C 'requir':113C,122C 'result':104C,143C 'ring':75C 'servic':47B,84C,102C 'softwar':3A,29B,73C,86C 'special':118C 'stop':55B 'subsequ':145C 'system':11A,53B,142C,146C 'unprivileg':85C 'user':5A,24B,40B,77C,91C,124C 'user-level':39B 'valid':33B,67C 'via':108C 'vulner':128C,141C 'window':25B 'within':74C 'without':117C 'work':56B","nicknames":[],"mitigations":[],"who_affected":"Systems running the affected Intel Graphics Software, where an authenticated local user or application can trigger the flaw. The sources do not list the affected driver versions or the exact product ranges. Machines with no Intel graphics software installed are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","intelgraphics","localusers","medium","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-33270':14A,17A 'app':6A 'crash':10A 'cve':12A,15A 'flaw':8A 'graphic':2A 'input':7A 'intel':1A 'local':4A 'softwar':3A 'system':11A 'user':5A","search_b":"'access':61B 'affect':52B 'attack':49B 'caus':43B 'code':63B 'data':60B 'denial':45B 'execut':64B 'flaw':34B 'gain':58B 'get':50B 'graphic':21B,28B 'infrastructur':18B 'input':32B 'intel':20B,27B 'intel-graph':19B 'let':36B 'level':41B 'local':23B,38B 'local-us':22B 'program':42B 'servic':47B 'softwar':29B 'stop':55B 'system':53B 'user':24B,40B 'user-level':39B 'valid':33B 'window':25B 'work':56B","search_c":"'3':76C 'access':110C 'adversari':87C 'allow':80C 'applic':78C 'attack':97C,112C 'authent':90C 'avail':137C,152C 'combin':92C 'complex':96C 'confidenti':132C,147C 'denial':82C,100C 'enabl':99C 'graphic':72C 'high':138C 'impact':130C,154C 'improp':65C 'input':66C 'integr':134C,149C 'intel':70C 'interact':125C 'intern':119C 'knowledg':120C 'local':109C 'low':95C 'may':79C,98C,105C,129C 'none':133C,135C,148C,150C,153C 'occur':107C 'potenti':106C,127C 'present':116C 'r':71C 'requir':113C,122C 'result':104C,143C 'ring':75C 'servic':84C,102C 'softwar':73C,86C 'special':118C 'subsequ':145C 'system':142C,146C 'unprivileg':85C 'user':77C,91C,124C 'valid':67C 'via':108C 'vulner':128C,141C 'within':74C 'without':117C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:41+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-33270","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33270","severity":null,"published_at":"2026-11-10T17:17:41+00:00","modified_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","fetched_at":"2026-11-10T17:22:42+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}