Synaptics

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-6482 1Synaptics 1Fingerprint Driver Jun 17, 2026 Jan 27, 2024 N/A· v4 5.2 MEDIUM· v3 N/A· v2 Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This...Show more Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.Show less
CVE-2023-4936 1Synaptics 1Displaylink Jun 17, 2026 Oct 11, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 It is possible to sideload a compromised DLL during the installation at elevated privilege.
CVE-2021-3675 1Synaptics 1Fingerprint Driver Jun 17, 2026 Jun 16, 2022 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synapt...Show more Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64.Show less
CVE-2022-27438 293cx BoomCaphyon+26 more 70Advanced Installer Angry Birds SpaceArchive Password Recovery+67 more Jul 9, 2026 Jun 6, 2022 N/A· v4 8.1 HIGH· v3 5.1 MEDIUM· v2 Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in...Show more Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.Show less
CVE-2019-18619 3Hp LenovoSynaptics 112Envy 13t Ah100 Firmware Envy 13t Aq100 FirmwareEnvy 17t Bw000 Firmware+109 more Jun 17, 2026 Jul 22, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise c...Show more Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.Show less
CVE-2019-18618 3Hp LenovoSynaptics 133Elite Slice Firmware Elite X2 1012 G2 FirmwareElite X2 1013 G3 Firmware+130 more Jun 17, 2026 Jul 22, 2020 N/A· v4 6.0 MEDIUM· v3 3.6 LOW· v2 Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the...Show more Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.Show less
CVE-2020-8337 1Synaptics 1Smart Audio Uwp Jun 17, 2026 Jun 9, 2020 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to...Show more An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.Show less
CVE-2019-9730 1Synaptics 1Sound Device Jun 17, 2026 Jun 5, 2019 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API.