high7.8
CVE-2018-16098
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unautho…
Impact
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Synaptics Thinkpad Ultranav Driver | Versions 18.0.7.119, 19.5.19.33, 19.0.17.140, 19.3.4.219, 16.2.19.23, 18.1.27.42 |
| Lenovo | Thinkpad Helix Firmware | All versions |
| Lenovo | Thiankpad L430 Firmware | All versions |
| Lenovo | Thiankpad L530 Firmware | All versions |
| Lenovo | Thiankpad P1 Firmware | All versions |
| Lenovo | Thiankpad X1 Extreme Firmware | All versions |
| Lenovo | Thiankpad P50s Firmware | All versions |
| Lenovo | Thiankpad P51 Firmware | All versions |
| Lenovo | Thiankpad P51s Firmware | All versions |
| Lenovo | Thiankpad P52s Firmware | All versions |
| Lenovo | Thiankpad P70 Firmware | All versions |
| Lenovo | Thiankpad S1 Yoga Firmware | All versions |