CVEvulnerability

CVE-2018-16098

7.8 HIGH Published 2019-01-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-01-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-428

Description

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

Affected configurations

• lenovo synaptics thinkpad ultranav driver 18.0.7.119 • lenovo synaptics thinkpad ultranav driver 19.5.19.33 • lenovo synaptics thinkpad ultranav driver 19.0.17.140 • lenovo synaptics thinkpad ultranav driver 19.3.4.219 • lenovo synaptics thinkpad ultranav driver 16.2.19.23 • lenovo synaptics thinkpad ultranav driver 18.1.27.42 • lenovo thinkpad helix firmware • lenovo thiankpad l430 firmware • lenovo thiankpad l530 firmware • lenovo thiankpad p1 firmware • lenovo thiankpad x1 extreme firmware • lenovo thiankpad p50s firmware • lenovo thiankpad p51 firmware • lenovo thiankpad p51s firmware • lenovo thiankpad p52s firmware • lenovo thiankpad p70 firmware • lenovo thiankpad s1 yoga firmware • lenovo thiankpad s430 firmware • lenovo thiankpad t420 firmware • lenovo thiankpad t420i firmware • lenovo thinkpad t420s firmware • lenovo thinkpad t420si firmware • lenovo thinkpad t430s firmware • lenovo thinkpad t430i firmware • lenovo thinkpad t431s firmware • lenovo thinkpad t440 firmware • lenovo thinkpad t440s firmware • lenovo thinkpad t440p firmware • lenovo thinkpad t460s firmware • lenovo thinkpad t470 firmware • lenovo thinkpad t470s firmware • lenovo thinkpad t520 firmware • lenovo thinkpad t520i firmware • lenovo thinkpad t530 firmware • lenovo thinkpad t530i firmware • lenovo thinkpad t540 firmware • lenovo thinkpad t540p firmware • lenovo thinkpad t550 firmware • lenovo thinkpad t560 firmware • lenovo thinkpad t570 firmware • lenovo thinkpad t580 firmware • lenovo thinkpad twist firmware • lenovo thinkpad s230u firmware • lenovo thinkpad w530 firmware • lenovo thinkpad w540 firmware • lenovo thinkpad w541 firmware • lenovo thinkpad w550s firmware • lenovo thinkpad x1 carbon firmware • lenovo thinkpad x1 yoga firmware • lenovo thinkpad x1 firmware • lenovo thinkpad x1 hybrid firmware • lenovo thinkpad x220 firmware • lenovo thinkpad x220i firmware • lenovo thinkpad x220 tablet firmware • lenovo thinkpad x230 firmware • lenovo thinkpad x230i firmware • lenovo thinkpad x230 tablet firmware • lenovo thinkpad x230i tablet firmware • lenovo thinkpad x230s firmware • lenovo thinkpad x240s firmware … and 4 more

Related

Weakness · CWE (1)

  • CWE-428 Unquoted Search Path or Element weakness

References