CVE Feed

    Dashboard / CVE / CVE-2018-16098

    CVE-2018-16098

    In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

    Published:Jan 24, 2019
    Last Modified:Nov 21, 2024
    EPS:Jan 24, 2019
    EPSS Score:0.00055
    CVSS Score:7.8

    Affected Products

    Vendor
    Lenovo
    Product
    Synaptics Thinkpad Ultranav Driver
    Vendor
    Lenovo
    Product
    Thiankpad L430
    Vendor
    Lenovo
    Product
    Thiankpad L430 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad L530
    Vendor
    Lenovo
    Product
    Thiankpad L530 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad P1
    Vendor
    Lenovo
    Product
    Thiankpad P1 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad P50s
    Vendor
    Lenovo
    Product
    Thiankpad P50s Firmware
    Vendor
    Lenovo
    Product
    Thiankpad P51
    Vendor
    Lenovo
    Product
    Thiankpad P51 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad P51s
    Vendor
    Lenovo
    Product
    Thiankpad P51s Firmware
    Vendor
    Lenovo
    Product
    Thiankpad P52s
    Vendor
    Lenovo
    Product
    Thiankpad P52s Firmware
    Vendor
    Lenovo
    Product
    Thiankpad P70
    Vendor
    Lenovo
    Product
    Thiankpad P70 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad S1 Yoga
    Vendor
    Lenovo
    Product
    Thiankpad S1 Yoga Firmware
    Vendor
    Lenovo
    Product
    Thiankpad S430
    Vendor
    Lenovo
    Product
    Thiankpad S430 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad T420
    Vendor
    Lenovo
    Product
    Thiankpad T420 Firmware
    Vendor
    Lenovo
    Product
    Thiankpad T420i
    Vendor
    Lenovo
    Product
    Thiankpad T420i Firmware
    Vendor
    Lenovo
    Product
    Thiankpad X1 Extreme
    Vendor
    Lenovo
    Product
    Thiankpad X1 Extreme Firmware
    Vendor
    Lenovo
    Product
    Thinkpad Helix
    Vendor
    Lenovo
    Product
    Thinkpad Helix Firmware
    Vendor
    Lenovo
    Product
    Thinkpad S230u
    Vendor
    Lenovo
    Product
    Thinkpad S230u Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T420s
    Vendor
    Lenovo
    Product
    Thinkpad T420s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T420si
    Vendor
    Lenovo
    Product
    Thinkpad T420si Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T430i
    Vendor
    Lenovo
    Product
    Thinkpad T430i Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T430s
    Vendor
    Lenovo
    Product
    Thinkpad T430s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T431s
    Vendor
    Lenovo
    Product
    Thinkpad T431s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T440
    Vendor
    Lenovo
    Product
    Thinkpad T440 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T440p
    Vendor
    Lenovo
    Product
    Thinkpad T440p Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T440s
    Vendor
    Lenovo
    Product
    Thinkpad T440s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T460s
    Vendor
    Lenovo
    Product
    Thinkpad T460s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T470
    Vendor
    Lenovo
    Product
    Thinkpad T470 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T470s
    Vendor
    Lenovo
    Product
    Thinkpad T470s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T520
    Vendor
    Lenovo
    Product
    Thinkpad T520 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T520i
    Vendor
    Lenovo
    Product
    Thinkpad T520i Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T530
    Vendor
    Lenovo
    Product
    Thinkpad T530 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T530i
    Vendor
    Lenovo
    Product
    Thinkpad T530i Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T540
    Vendor
    Lenovo
    Product
    Thinkpad T540 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T540p
    Vendor
    Lenovo
    Product
    Thinkpad T540p Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T550
    Vendor
    Lenovo
    Product
    Thinkpad T550 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T560
    Vendor
    Lenovo
    Product
    Thinkpad T560 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T570
    Vendor
    Lenovo
    Product
    Thinkpad T570 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T580
    Vendor
    Lenovo
    Product
    Thinkpad T580 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad Twist
    Vendor
    Lenovo
    Product
    Thinkpad Twist Firmware
    Vendor
    Lenovo
    Product
    Thinkpad W530
    Vendor
    Lenovo
    Product
    Thinkpad W530 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad W540
    Vendor
    Lenovo
    Product
    Thinkpad W540 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad W541
    Vendor
    Lenovo
    Product
    Thinkpad W541 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad W550s
    Vendor
    Lenovo
    Product
    Thinkpad W550s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1
    Vendor
    Lenovo
    Product
    Thinkpad X1 Carbon
    Vendor
    Lenovo
    Product
    Thinkpad X1 Carbon Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Hybrid
    Vendor
    Lenovo
    Product
    Thinkpad X1 Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X1 Yoga
    Vendor
    Lenovo
    Product
    Thinkpad X1 Yoga Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X220
    Vendor
    Lenovo
    Product
    Thinkpad X220 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X220 Tablet
    Vendor
    Lenovo
    Product
    Thinkpad X220 Tablet Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X220i
    Vendor
    Lenovo
    Product
    Thinkpad X220i Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X230
    Vendor
    Lenovo
    Product
    Thinkpad X230 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X230 Tablet
    Vendor
    Lenovo
    Product
    Thinkpad X230 Tablet Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X230i
    Vendor
    Lenovo
    Product
    Thinkpad X230i Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X230i Tablet
    Vendor
    Lenovo
    Product
    Thinkpad X230i Tablet Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X230s
    Vendor
    Lenovo
    Product
    Thinkpad X230s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X240
    Vendor
    Lenovo
    Product
    Thinkpad X240 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X240s
    Vendor
    Lenovo
    Product
    Thinkpad X240s Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X250
    Vendor
    Lenovo
    Product
    Thinkpad X250 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad X280
    Vendor
    Lenovo
    Product
    Thinkpad X280 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 11e
    Vendor
    Lenovo
    Product
    Thinkpad Yoga 11e Firmware
    Vendor
    Microsoft
    Product
    Windows 10
    Vendor
    Microsoft
    Product
    Windows 7
    Vendor
    Microsoft
    Product
    Windows 8.1

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-428 Unquoted Search Path or Element

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High