CVE-2016-8225

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@lenovo.com

Published

2017-01-26

Last modified

2024-08-06

Weaknesses

CWE-428

Affected products

• Edge Keyboard Driver (Lenovo)
• Slim Usb Keyboard Driver (Lenovo)
• Edge And Slim Usb Keyboard Driver (Lenovo Group Ltd.)

References

• http://www.securityfocus.com/bid/95842
• https://support.lenovo.com/us/en/solutions/LEN-11588