Synaptics: CVE Program partner

CVEs, 365 days17 all time, 1 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Synaptics, Inc.
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Synaptics issues only.
Advisories	https://www.synaptics.com/products/touchpad-family

CVE-2025-11772 2025-12-01 · CVSS 6.6
A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver in
CVE-2024-9157 2025-03-11 · CVSS 7.8
** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized
CVE-2023-5447 2024-05-11 · CVSS 5.5
Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for t
CVE-2023-6482 2024-01-27 · CVSS 5.2
Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor a
CVE-2023-4936 2023-10-11 · CVSS 5.5
It is possible to sideload a compromised DLL during the installation at elevated privilege.
CVE-2021-3675 2022-06-16 · CVSS 5.5
Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with p

Synaptics