Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-16098 Details

Description

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.lenovo.com/us/en/solutions/LEN-24573	CVE	Broken Link
https://support.lenovo.com/bg/en/product_security/len-24573	[email protected]	PatchVendor Advisory
https://support.lenovo.com/us/en/solutions/LEN-24573	[email protected]	Broken Link

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-428	Unquoted Search Path or Element	[email protected]

Affected Products

Product	Versions
lenovo synaptics thinkpad ultranav driver	18.0.7.119 19.5.19.33 19.0.17.140 19.3.4.219 16.2.19.23
CPE cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.0.7.119:::::::* cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.5.19.33:::::::* cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.0.17.140:::::::* cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.3.4.219:::::::* cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:16.2.19.23:::::::* cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.1.27.42:::::::* Remediation No remediation found in references.
microsoft windows 7	All versions
CPE cpe:2.3:o:microsoft:windows_7:-:::::::* Remediation No remediation found in references.
microsoft windows 8.1	All versions
CPE cpe:2.3:o:microsoft:windows_8.1:-::::pro_n::: cpe:2.3:o:microsoft:windows_8.1:-:::::::* Remediation No remediation found in references.
microsoft windows 10	All versions
CPE cpe:2.3:o:microsoft:windows_10:-:::::::* Remediation No remediation found in references.
lenovo thinkpad helix firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_helix_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad helix	All versions
CPE cpe:2.3:h:lenovo:thinkpad_helix:-:::::::* Remediation No remediation found in references.
lenovo thiankpad l430 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_l430_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad l430	All versions
CPE cpe:2.3:h:lenovo:thiankpad_l430:-:::::::* Remediation No remediation found in references.
lenovo thiankpad l530 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_l530_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad l530	All versions
CPE cpe:2.3:h:lenovo:thiankpad_l530:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p1 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_p1_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p1	All versions
CPE cpe:2.3:h:lenovo:thiankpad_p1:-:::::::* Remediation No remediation found in references.
lenovo thiankpad x1 extreme firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_x1_extreme_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad x1 extreme	All versions
CPE cpe:2.3:h:lenovo:thiankpad_x1_extreme:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p50s firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_p50s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p50s	All versions
CPE cpe:2.3:h:lenovo:thiankpad_p50s:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p51 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_p51_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p51	All versions
CPE cpe:2.3:h:lenovo:thiankpad_p51:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p51s firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_p51s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p51s	All versions
CPE cpe:2.3:h:lenovo:thiankpad_p51s:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p52s firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_p52s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p52s	All versions
CPE cpe:2.3:h:lenovo:thiankpad_p52s:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p70 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_p70_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad p70	All versions
CPE cpe:2.3:h:lenovo:thiankpad_p70:-:::::::* Remediation No remediation found in references.
lenovo thiankpad s1 yoga firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_s1_yoga_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad s1 yoga	All versions
CPE cpe:2.3:h:lenovo:thiankpad_s1_yoga:-:::::::* Remediation No remediation found in references.
lenovo thiankpad s430 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_s430_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad s430	All versions
CPE cpe:2.3:h:lenovo:thiankpad_s430:-:::::::* Remediation No remediation found in references.
lenovo thiankpad t420 firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_t420_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad t420	All versions
CPE cpe:2.3:h:lenovo:thiankpad_t420:-:::::::* Remediation No remediation found in references.
lenovo thiankpad t420i firmware	All versions
CPE cpe:2.3:o:lenovo:thiankpad_t420i_firmware:-:::::::* Remediation No remediation found in references.
lenovo thiankpad t420i	All versions
CPE cpe:2.3:h:lenovo:thiankpad_t420i:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t420s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t420s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t420s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t420s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t420si firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t420si_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t420si	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t420si:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t430s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t430s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t430s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t430s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t430i firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t430i_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t430i	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t430i:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t431s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t431s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t431s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t431s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t440 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t440_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t440	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t440:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t440s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t440s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t440s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t440s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t440p firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t440p_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t440p	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t440p:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t460s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t460s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t460s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t460s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t470 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t470_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t470	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t470:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t470s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t470s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t470s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t470s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t520 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t520_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t520	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t520:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t520i firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t520i_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t520i	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t520i:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t530 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t530_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t530	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t530:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t530i firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t530i_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t530i	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t530i:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t540 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t540_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t540	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t540:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t540p firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t540p_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t540p	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t540p:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t550 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t550_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t550	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t550:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t560 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t560_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t560	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t560:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t570 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t570_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t570	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t570:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t580 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_t580_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t580	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t580:-:::::::* Remediation No remediation found in references.
lenovo thinkpad twist firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_twist_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad twist	All versions
CPE cpe:2.3:h:lenovo:thinkpad_twist:-:::::::* Remediation No remediation found in references.
lenovo thinkpad s230u firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_s230u_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad s230u	All versions
CPE cpe:2.3:h:lenovo:thinkpad_s230u:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w530 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_w530_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w530	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w530:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w540 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_w540_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w540	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w540:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w541 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_w541_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w541	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w541:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w550s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_w550s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w550s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w550s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x1_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 hybrid firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x1_hybrid_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 hybrid	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_hybrid:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x220 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x220_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x220	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x220:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x220i firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x220i_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x220i	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x220i:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x220 tablet firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x220_tablet_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x220 tablet	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x220_tablet:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x230_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x230:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230i firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x230i_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230i	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x230i:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230 tablet firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x230_tablet_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230 tablet	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x230_tablet:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230i tablet firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x230i_tablet_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230i tablet	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x230i_tablet:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x230s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x230s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x230s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x240s firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x240s_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x240s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x240s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x240 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x240_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x240	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x240:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x250 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x250_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x250	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x250:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x280 firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_x280_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x280	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x280:-:::::::* Remediation No remediation found in references.
lenovo thinkpad yoga 11e firmware	All versions
CPE cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:-:::::::* Remediation No remediation found in references.
lenovo thinkpad yoga 11e	All versions
CPE cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 8, 2019	CPE Deprecation Remap	[email protected]
Feb 22, 2019	Initial Analysis	[email protected]
Jan 25, 2019	CVE Modified	[email protected]

CVE-2018-16098 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation