Synaptics Pointing Device Driver Vulnerability - Lenovo Support US

**Lenovo Security Advisory:**LEN-24573

Potential Impact: Code execution

Severity: Medium

Scope of Impact: Lenovo-specific

**CVE Identifier:**CVE-2018-16098

Summary Description:

A researcher reported to Lenovo an unquoted search path vulnerability was found in Synaptics Pointing Device drivers of some Lenovo devices. This vulnerability could allow unauthorized code execution as a low privilege user.

Mitigation Strategy for Customers (what you should do to protect yourself):

Customers should upgrade to the Synaptics Pointing Device driver version (or newer) indicated for your model in the Product Impact section below.