CVE-2017-5717

highpriority · track · 42EPSS 0.014 · 73 %ileexploit · functionalDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · functional

Likely / severe?

1.44% (73rd) EPSS

CVSS 7.2 · high

Is it mine?

19 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.07.4highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-704USprimaryCWE-704US

exploits (1)

Public proof-of-concept and weaponised exploit code.

EDB-43373Intel Content Protection HECI Service - Type Confusion Privilege Escalationfunctional · exploit_db

affected products (19)

Products and version ranges known to be affected.

Dell BIOSall versionscert_bundDEcpe:/h:dell:bios:-
Intel Graphics Driver <= 10.18.x.4880all versionscert_bundDEcpe:/a:intel:graphic_driver:10.18.x.4880
Intel Graphics Driver <= 15.36.x.4880all versionscert_bundDEcpe:/a:intel:graphic_driver:15.36.x.4880
Lenovo Computerall versionscert_bundDEcpe:/o:lenovo:lenovo_computer:-
Intel Corporation Intel Graphics Driver≤ 15.49/15.47/15.46/15.45/15.40/15.36/15.33enisa_euvdEU
Intel Corp. Intel Graphics Driver≤ 15.36fstec_bduRU
Intel Corp. Intel Graphics Driver≤ 15.33fstec_bduRU
Intel Corp. Intel Graphics Driver≤ 15.40fstec_bduRU
Intel Corp. Intel Graphics Driver≤ 15.49fstec_bduRU
Intel Corp. Intel Graphics Driver≤ 15.47fstec_bduRU
Intel Corp. Intel Graphics Driver≤ 15.46fstec_bduRU
Intel Corp. Intel Graphics Driver≤ 15.45fstec_bduRU
intel graphics driver= 15.33nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*
intel graphics driver= 15.36nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*
intel graphics driver= 15.40nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*
intel graphics driver= 15.45nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*
intel graphics driver= 15.46nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*
intel graphics driver= 15.47nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*
intel graphics driver= 15.49nvdUScpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-0821Intel Graphic Driver: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2017-12-12csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Intel Graphic Driver ausnutzen, um seine Privilegien zu erhöhen.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund nvd NVD CVE.org MITRE

published 2017-12-12modified 2026-06-17

related (393)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2021-30563US	high8.8OT critical	9.00% (95th)	KEV	2021-08-03
Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-11707US	high8.8OT critical	38.0% (99th)	KEV	2019-07-23
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks…
CVE-2017-5070US	high8.8OT critical	32.1% (98th)	KEV	2017-10-27
Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a…
CVE-2017-8291US	high7.8OT critical	97.0% (100th)	KEV	2017-04-27
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps doc…
CVE-2017-0037US	high8.1OT critical	80.4% (100th)	KEV	2017-02-26
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in msht…

+388 more

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan