Synaptics, Inc. — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by Synaptics, Inc. (synaptics). https://vulnogram.org/seaview/icons/synaptics.png Synaptics, Inc. — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2025-11772 · 6.6 MEDIUM — Co-Installer Privilege Escalation https://vulnogram.org/CVE-2025-11772 https://vulnogram.org/CVE-2025-11772 A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation. Medium Mon, 01 Dec 2025 18:55:10 GMT CVE-2024-9157 · 7.8 HIGH 👻 — Privilege Escalation Vulnerability in CxUIUSvc service https://vulnogram.org/CVE-2024-9157 https://vulnogram.org/CVE-2024-9157 ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID… High Unsupported When Assigned Tue, 11 Mar 2025 16:28:06 GMT CVE-2023-5447 · 5.5 MEDIUM — Use-After-Free in Service for Hardware Support App for Fingerprint Driver https://vulnogram.org/CVE-2023-5447 https://vulnogram.org/CVE-2023-5447 Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App. Medium Sat, 11 May 2024 02:41:19 GMT CVE-2023-6482 · 5.2 MEDIUM — Encryption key derived from static host information https://vulnogram.org/CVE-2023-6482 https://vulnogram.org/CVE-2023-6482 Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has p… Medium Sat, 27 Jan 2024 00:19:15 GMT CVE-2023-4936 · 5.5 MEDIUM — Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading https://vulnogram.org/CVE-2023-4936 https://vulnogram.org/CVE-2023-4936 It is possible to sideload a compromised DLL during the installation at elevated privilege. Medium Wed, 11 Oct 2023 17:00:07 GMT CVE-2021-3675 · 5.5 MEDIUM — synaTEE.signed.dll Out-Of-Bounds Heap Write https://vulnogram.org/CVE-2021-3675 https://vulnogram.org/CVE-2021-3675 Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driv… Medium Thu, 16 Jun 2022 16:15:00 GMT