PSIRT@synaptics.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS PSIRT@synaptics.com
03
assessed vulnerabilities (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-11772US | — | — | ||
A carefully crafted DLL, copied to
C:\ProgramData\Synaptics
folder, allows a local user to execute
arbitrary code with elevated privileges during driver installation. | ||||
| CVE-2024-9157US | — | — | ||
** UNSUPPORTED WHEN ASSIGNED **
A privilege escalation vulnerability in CxUIUSvc64.exe and
CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized
attacker to load a… | ||||
| CVE-2023-5447US | — | — | ||
Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardwar… | ||||
| CVE-2023-6482US | medium5.2OT elevated | — | ||
Use of encryption key derived from static information in Synaptics Fingerprint Driver allows
an attacker to set up a TLS session with the fingerprint sensor and send restricted c… | ||||
| CVE-2023-4936US | medium6.7 | — | ||
It is possible to sideload a compromised DLL during the installation at elevated privilege. | ||||
| CVE-2021-3675US | high7.1 | — | ||
Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of con… | ||||