Synaptics records

8 published records for vendor synaptics.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2019-9730Proof of concept	Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to isynaptics · sound device Local privilege escalation	High8.8	—	1.0%	Jun 5, 2019
33Monitor	CVE-2022-27438Proof of concept	Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affectcaphyon · advanced installer · CWE-494 pre-auth RCE	High8.1	—	2.0%	Jun 6, 2022
31Monitor	CVE-2019-18619No exploit	Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allsynaptics · vfs75xx firmware · CWE-763 RCE	High7.8	—	0.5%	Jul 22, 2020
28Monitor	CVE-2021-3675No exploit	synaTEE.signed.dll Out-Of-Bounds Heap Writesynaptics · fingerprint driver · CWE-20	High7.1	—	0.3%	Jun 16, 2022
26Monitor	CVE-2020-8337No exploit	An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCsynaptics · smart audio uwp · CWE-428 RCE	Medium6.7	—	0.4%	Jun 9, 2020
26Monitor	CVE-2023-4936No exploit	Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloadingsynaptics · displaylink · CWE-269 Local privilege escalation	Medium6.7	—	0.2%	Oct 11, 2023
24Monitor	CVE-2019-18618No exploit	Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to synaptics · vfs75xx firmware	Medium6.0	—	0.5%	Jul 22, 2020
20Monitor	CVE-2023-6482No exploit	Encryption key derived from static host informationsynaptics · fingerprint driver · CWE-321 Hard-coded credentials	Medium5.2	—	0.1%	Jan 26, 2024

CVE-2019-9730
35Monitor
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to i
HighCVSS 8.8Proof of conceptEPSS 1%
- Local privilege escalation
synaptics · sound deviceJun 5, 2019
CVE-2022-27438
33Monitor
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affect
HighCVSS 8.1Proof of conceptEPSS 2%
- pre-auth RCE
caphyon · advanced installerJun 6, 2022
CVE-2019-18619
31Monitor
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) all
HighCVSS 7.8No exploitEPSS 1%
- RCE
synaptics · vfs75xx firmwareJul 22, 2020
CVE-2021-3675
28Monitor
synaTEE.signed.dll Out-Of-Bounds Heap Write
HighCVSS 7.1No exploitEPSS 0%
synaptics · fingerprint driverJun 16, 2022
CVE-2020-8337
26Monitor
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DC
MediumCVSS 6.7No exploitEPSS 0%
- RCE
synaptics · smart audio uwpJun 9, 2020
CVE-2023-4936
26Monitor
Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
synaptics · displaylinkOct 11, 2023
CVE-2019-18618
24Monitor
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to
MediumCVSS 6.0No exploitEPSS 1%
synaptics · vfs75xx firmwareJul 22, 2020
CVE-2023-6482
20Monitor
Encryption key derived from static host information
MediumCVSS 5.2No exploitEPSS 0%
- Hard-coded credentials
synaptics · fingerprint driverJan 26, 2024