What’s Vulnerable › Vulnerabilities

CVE-2019-11089

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-14 · updated 2026-06-17
• Weakness: CWE-20

Description

Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access.

Affected products

• Intel Corporation Intel(R) Graphics Driver for Windows: before 25.20.100.6519 — fixed in 25.20.100.6519
• NetApp Cloud Backup: all versions
• NetApp Data Availability Services: all versions
• NetApp Solidfire Baseboard Management Controller Firmware: all versions
• NetApp Steelstore Cloud Integrated Storage: all versions

How to fix

Upgrade to a fixed version: Intel Corporation Intel(R) Graphics Driver for Windows 25.20.100.6519. Check the vendor advisory for mitigations.

References

• https://security.netapp.com/advisory/ntap-20200320-0005/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html
• https://security.netapp.com/advisory/ntap-20200320-0005/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html

Get alerted when CVE-2019-11089 or the next vulnerability affects your stack