High severity · published Dec 26, 2022
CVE-2019-19705
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A9
Aio 910-27ish Firmware · Lenovo
before 6.0.8924.1 · source: NVD
AY
Aio Y910-27ish Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio300-23isu Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio310-20iap Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio510-22ish Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio510-23ish Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio520-22ikl Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio520-22iku Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio520-24ikl Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio520-24iku Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio520-27ikl Firmware · Lenovo
before 6.0.8881.1 · source: NVD
AF
Aio720-24ikb Firmware · Lenovo
before 6.0.8881.1 · source: NVD