{"id":"CVE-2026-57884","kind":"vulnerability","aliases":["CVE-2026-57884"],"related":[],"title":"Intel Graphics Software: search path flaw lets local user gain higher privileges","description":"Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some versions of Intel Graphics Software load code from an uncontrolled search path when run from user space. A local user with an ordinary account can use this to escalate privileges, which needs high complexity conditions and user interaction.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["intel-graphics-software","local-users","vendor","windows"],"not_affected_if":["fixed-version","no-intel-graphics-software"],"how_to_check":"- Check the installed Intel Graphics Software version in the application's about screen or installed programs list\n- Compare it with the fixed version below; anything older is in scope","fix":"- Intel Graphics Software: move to `26.14.2303.1` or later","status":"open","published_at":"2026-11-10T17:17:44+00:00","first_seen_at":"2026-11-10T17:22:44+00:00","triaged_at":"2026-11-10T17:24:23+00:00","updated_at":"2026-11-10T17:24:23+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-10T17:24:23Z","model":"claude-haiku-5-5","output":{"fix":"- Intel Graphics Software: move to `26.14.2303.1` or later","reach":"local","title":"Intel Graphics Software: search path flaw lets local user gain higher privileges","impact":"high","summary":"Some versions of Intel Graphics Software load code from an uncontrolled search path when run from user space. A local user with an ordinary account can use this to escalate privileges, which needs high complexity conditions and user interaction.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["intel-graphics-software","windows","local-users"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"local user escalates to higher privileges on the machine","analyst_note":"product_name not listed; affected product line and OS scope unknown from the sources.","how_to_check":"- Check the installed Intel Graphics Software version in the application's about screen or installed programs list\n- Compare it with the fixed version below; anything older is in scope\n- unknown for any other check, as the sources do not say","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["fixed-version","no-intel-graphics-software"],"who_is_affected":"Machines running Intel Graphics Software older than `26.14.2303.1` are exposed, reachable only by someone with a local user account on that machine. Machines that do not run this software, or that run the fixed version, are not affected. The sources do not say which Intel graphics products or configurations are in scope beyond this software.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000738,"input_tokens":4666,"output_tokens":543,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-57884':15A,18A '26.14.2303.1':78C '3':81C 'access':115C 'account':52B 'activ':127C 'adversari':92C 'allow':85C 'applic':83C 'attack':102C,117C 'authent':95C 'avail':141C,156C 'code':35B 'combin':97C 'complex':62B,101C 'condit':63B 'confidenti':136C,151C 'cve':13A,16A 'enabl':104C 'escal':57B,87C,105C 'flaw':6A 'gain':10A 'graphic':2A,21B,32B,74C 'high':61B,100C,137C,139C,142C 'higher':11A 'impact':134C,158C 'integr':138C,153C 'intel':1A,20B,31B,72C 'intel-graphics-softwar':19B 'interact':66B,129C 'intern':123C 'knowledg':124C 'let':7A 'load':34B 'local':8A,24B,47B,114C 'local-us':23B 'may':84C,103C,110C,133C 'need':60B 'none':152C,154C,157C 'occur':112C 'ordinari':51B 'path':5A,40B,69C 'potenti':111C,131C 'present':120C 'privileg':12A,58B,89C,107C 'r':73C 'requir':118C,126C 'result':109C,147C 'ring':80C 'run':42B 'search':4A,39B,68C 'softwar':3A,22B,33B,75C,91C 'space':45B 'special':122C 'subsequ':149C 'system':146C,150C 'uncontrol':38B,67C 'unprivileg':90C 'use':54B 'user':9A,25B,44B,48B,65B,82C,96C,128C 'vendor':26B 'version':29B,77C 'via':113C 'vulner':132C,145C 'window':27B 'within':79C 'without':121C","nicknames":[],"mitigations":[],"who_affected":"Machines running Intel Graphics Software older than `26.14.2303.1` are exposed, reachable only by someone with a local user account on that machine. Machines that do not run this software, or that run the fixed version, are not affected. The sources do not say which Intel graphics products or configurations are in scope beyond this software.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["intelgraphicssoftware","localusers","medium","vendor","windows"],"campaign_type":null,"search_a":"'-2026':14A,17A '-57884':15A,18A 'cve':13A,16A 'flaw':6A 'gain':10A 'graphic':2A 'higher':11A 'intel':1A 'let':7A 'local':8A 'path':5A 'privileg':12A 'search':4A 'softwar':3A 'user':9A","search_b":"'account':52B 'code':35B 'complex':62B 'condit':63B 'escal':57B 'graphic':21B,32B 'high':61B 'intel':20B,31B 'intel-graphics-softwar':19B 'interact':66B 'load':34B 'local':24B,47B 'local-us':23B 'need':60B 'ordinari':51B 'path':40B 'privileg':58B 'run':42B 'search':39B 'softwar':22B,33B 'space':45B 'uncontrol':38B 'use':54B 'user':25B,44B,48B,65B 'vendor':26B 'version':29B 'window':27B","search_c":"'26.14.2303.1':78C '3':81C 'access':115C 'activ':127C 'adversari':92C 'allow':85C 'applic':83C 'attack':102C,117C 'authent':95C 'avail':141C,156C 'combin':97C 'complex':101C 'confidenti':136C,151C 'enabl':104C 'escal':87C,105C 'graphic':74C 'high':100C,137C,139C,142C 'impact':134C,158C 'integr':138C,153C 'intel':72C 'interact':129C 'intern':123C 'knowledg':124C 'local':114C 'may':84C,103C,110C,133C 'none':152C,154C,157C 'occur':112C 'path':69C 'potenti':111C,131C 'present':120C 'privileg':89C,107C 'r':73C 'requir':118C,126C 'result':109C,147C 'ring':80C 'search':68C 'softwar':75C,91C 'special':122C 'subsequ':149C 'system':146C,150C 'uncontrol':67C 'unprivileg':90C 'user':82C,96C,128C 'version':77C 'via':113C 'vulner':132C,145C 'within':79C 'without':121C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-57884","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57884","severity":null,"published_at":"2026-11-10T17:17:44+00:00","modified_at":"2026-11-10T17:17:44+00:00","first_seen_at":"2026-11-10T17:22:44+00:00","fetched_at":"2026-11-10T17:22:44+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}