In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various…
Priority LOW 34CWE-428Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-428.
Summary
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.
Why it matters now
EPSS 0.00397 34th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | Various ThinkPad products | Various | — | No fix listed | CNA |
- Various ThinkPad products VendorLenovo Affected Various Fixed in — No fix listed CNA
CPE configurations NVD · 126
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.0.7.119:*:*:*:*:*:*:* | 18.0.7.119 | Vulnerable | Lenovo |
| cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:pro_n:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.5.19.33:*:*:*:*:*:*:* | 19.5.19.33 | Vulnerable | Lenovo |
| cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.0.17.140:*:*:*:*:*:*:* | 19.0.17.140 | Vulnerable | Lenovo |
| cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.3.4.219:*:*:*:*:*:*:* | 19.3.4.219 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:16.2.19.23:*:*:*:*:*:*:* | 16.2.19.23 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.1.27.42:*:*:*:*:*:*:* | 18.1.27.42 | Vulnerable | Lenovo |
- cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.0.7.119:*:*:*:*:*:*:* Versions 18.0.7.119 Vulnerable ·Lenovo
- cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:pro_n:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.5.19.33:*:*:*:*:*:*:* Versions 19.5.19.33 Vulnerable ·Lenovo
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.0.17.140:*:*:*:*:*:*:* Versions 19.0.17.140 Vulnerable ·Lenovo
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.3.4.219:*:*:*:*:*:*:* Versions 19.3.4.219 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:16.2.19.23:*:*:*:*:*:*:* Versions 16.2.19.23 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.1.27.42:*:*:*:*:*:*:* Versions 18.1.27.42 Vulnerable ·Lenovo
Show 116 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:thinkpad_helix_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_l430_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_l430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_l530_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_l530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_p1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_p1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_x1_extreme_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_x1_extreme:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_p50s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_p50s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_p51_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_p51:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_p51s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_p51s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_p52s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_p52s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_p70_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_p70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_s1_yoga_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_s1_yoga:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_s430_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_s430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_t420_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_t420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thiankpad_t420i_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thiankpad_t420i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t420s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t420s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t420si_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t420si:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t430s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t430s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t430i_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t430i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t431s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t431s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t440_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t440s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t440p_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t460s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t470_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t470s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t520_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t520i_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t520i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t530_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t530i_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t530i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t540_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t540p_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t550_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t560_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t570_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t580_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_twist_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_twist:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_s230u_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_s230u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_w530_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_w530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_w540_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_w541_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_w550s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_hybrid_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x1_hybrid:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x220_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x220i_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x220i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x220_tablet_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x220_tablet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x230_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x230:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x230i_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x230i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x230_tablet_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x230_tablet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x230i_tablet_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x230i_tablet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x230s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x230s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x240s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x240_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x250_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x280_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:thinkpad_helix_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_l430_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_l430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_l530_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_l530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_p1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_p1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_x1_extreme_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_x1_extreme:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_p50s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_p50s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_p51_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_p51:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_p51s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_p51s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_p52s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_p52s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_p70_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_p70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_s1_yoga_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_s1_yoga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_s430_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_s430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_t420_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_t420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thiankpad_t420i_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thiankpad_t420i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t420s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t420s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t420si_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t420si:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t430s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t430s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t430i_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t430i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t431s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t431s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t440_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t440s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t440p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t460s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t470_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t470s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t520_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t520i_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t520i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t530_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t530i_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t530i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t540_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t540p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t550_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t560_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t570_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t580_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_twist_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_twist:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_s230u_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_s230u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_w530_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_w530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_w540_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_w541_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_w550s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_hybrid_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x1_hybrid:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x220_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x220i_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x220i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x220_tablet_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x220_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x230_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x230i_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x230i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x230_tablet_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x230_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x230i_tablet_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x230i_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x230s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x230s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x240s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x240_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x280_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-16098
- 2026-10-03 Alias added: GHSA-5wpm-3w6m-74wv
References
Sources
- CVE-2018-16098 · CVE Program
- CVE-2018-16098 · NVD
- FIRST EPSS
- GHSA-5wpm-3w6m-74wv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences