VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 29, 2017· Updated May 13, 2026

CVE-2017-3757

CVE-2017-3757

Description

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.

Affected products

2
  • EMC Corporation/Elan Touchpad Driver
    cpe:2.3:a:emc:elan_touchpad_driver:*:*:*:*:*:*:*:*
    Range: <=11.4.1.6
  • Lenovo Group Ltd./Lenovo ElanTech Touchpad driverv5
    Range: various versions

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.