CVE-2016-8225

Published: Jan 26, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.

Affected (2)

Products: Lenovo: Edge Keyboard Driver, Slim Usb Keyboard Driver

Lenovo

2 products

Edge Keyboard Driver

Slim Usb Keyboard Driver

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Lenovo Edge Keyboard Driver	Up to 1.20
Lenovo Slim Usb Keyboard Driver	Up to 1.20

Related CWEs

CWE-428

Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (4)

http://www.securityfocus.com/bid/95842

Source: psirt@lenovo.com

https://support.lenovo.com/us/en/solutions/LEN-11588

Source: psirt@lenovo.com

Vendor Advisory

http://www.securityfocus.com/bid/95842

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.lenovo.com/us/en/solutions/LEN-11588

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.