Intel Iris XE Graphics
33 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Intel Iris XE Graphics, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.
Intel Iris XE Graphics CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 4 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 4 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 15 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 1 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 33 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High7
- Medium22
- Low4
Latest CVEs
The 15 most recently published vulnerabilities affecting Intel Iris XE Graphics.
- CVE-2025-20023Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access.6.7
- CVE-2024-47800Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access.6.7
- CVE-2024-46895Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escalation of p...6.7
- CVE-2024-45371Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local ac...6.7
- CVE-2024-39758Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow an authenticated user to potentially enable denial of service via local ac...5.9
- CVE-2024-31150Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access.3.8
- CVE-2024-29222Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access.6.1
- CVE-2024-28954Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access.6.7
- CVE-2025-21099Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access.6.7
- CVE-2025-20101Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access.8.4
- CVE-2025-20071NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.6.5
- CVE-2025-20052Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via local access.7.3
- CVE-2025-20041Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version 32.0.101.6325/32.0.101.6252 may allow an authenticated user...6.7
- CVE-2025-20031Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.6.5
- CVE-2025-20018Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.8.4
Product grouping is registry-driven, with AI assist and human review. How it works