High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-26	CVE-2019-19705	Unquoted Search Path or Element vulnerability in Lenovo products Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading. local low complexity lenovo CWE-428	7.8
2020-07-22	CVE-2019-18619	Release of Invalid Pointer or Reference vulnerability in multiple products Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers. local low complexity synaptics lenovo hp CWE-763	7.8
2019-01-24	CVE-2018-16098	Unquoted Search Path or Element vulnerability in Lenovo products In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user. local low complexity lenovo CWE-428	7.8