CVE-2019-9730

EUVD-2019-19095
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
synapticssound_device
𝑥
< 2.29
𝑥
= Vulnerable software versions
References
https://support.lenovo.com/us/en/product_security/LEN-25822
https://twitter.com/Jackson_T
https://www.synaptics.com/company/blog/
https://support.lenovo.com/us/en/product_security/LEN-25822
https://twitter.com/Jackson_T
https://www.synaptics.com/company/blog/