Privilege Escalation in Dolby DAX2API Service - Lenovo Support US

Lenovo Security Advisory: LEN-12704

Potential Impact: Local privilege escalation

Severity: High

**Scope of Impact:**Industry-Wide

**CVE Identifier:**CVE-2017-7293

Summary Description:

A privilege escalation vulnerability has been discovered in Dolby’s DAX2API service where a local user can run arbitrary code with system level privileges. This service is included in various audio drivers contained in Lenovo products, including the Realtek audio driver and the Lenovo Settings application.

Mitigation Strategy for Customers (what you should do to protect yourself):

Update the drivers listed below by following the instructions in the readme file.

Product Impact: