CVE-2020-12384

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Feb 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-123857.8Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable CVE-2020-123865.5Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable den CVE-2020-123878.1A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable CVE-2020-1238810.0The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only af CVE-2020-1238910.0The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only af CVE-2020-12398.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co CVE-2020-123909.8Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.CVE-2020-123917.5Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scri CVE-2020-123925.5The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the CVE-2020-123937.8The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the web CVE-2020-123943.3A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different o CVE-2020-123959.8Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed e