{"id":"CVE-2019-0164","aliases":["EUVD-2019-0971","GHSA-fw96-99q5-pmjp"],"status":"published","title":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version...","description":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00349,"percentile":0.28698,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2019-06-13T15:36:25Z","modified":"2026-06-17T02:07:51Z","products":[{"vendor":"intel","product":"turbo_boost_max_technology_3.0"},{"vendor":"lenovo","product":"thinkstation_p410_firmware"},{"vendor":"lenovo","product":"thinkstation_p510_firmware"},{"vendor":"lenovo","product":"thinkstation_p710_firmware"},{"vendor":"lenovo","product":"thinkstation_p910_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00243.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108770","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://support.lenovo.com/us/en/product_security/LEN-27841","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0164"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/in"},{"url":"https://github.com/advisories/GHSA-fw96-99q5-pmjp"}],"sources":{"cve":[{"id":"CVE-2019-0164","description":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2019-06-13T15:36:25Z","modified":"2024-08-04T17:44:14.614Z","updated_at":"2026-11-02T14:32:24.473448Z"}],"euvd":[{"id":"EUVD-2019-0971","description":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2019-06-13T15:36:25Z","modified":"2024-08-04T17:44:14Z","updated_at":"2026-11-03T03:07:02.510914Z"}],"ghsa":[{"id":"GHSA-fw96-99q5-pmjp","title":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version...","description":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-05-24T16:47:58Z","modified":"2023-03-02T18:30:32Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:54:15.627441Z"}],"nvd":[{"id":"CVE-2019-0164","description":"Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2019-06-13T16:29:00.84Z","modified":"2026-06-17T02:07:51.483Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:05:16.285679Z"}]}}
