CVE-2018-16098: Lenovo Synaptics Thinkpad Ultranav Driver

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

Affected products

  • Lenovo Synaptics Thinkpad Ultranav Driver: version 18.0.7.119 only; version 19.5.19.33 only; version 19.0.17.140 only; version 19.3.4.219 only; version 16.2.19.23 only; version 18.1.27.42 only
  • Lenovo Thiankpad l430 Firmware: affected versions not specified
  • Lenovo Thiankpad l530 Firmware: affected versions not specified
  • Lenovo Thiankpad p1 Firmware: affected versions not specified
  • Lenovo Thiankpad p50s Firmware: affected versions not specified
  • Lenovo Thiankpad p51 Firmware: affected versions not specified
  • Lenovo Thiankpad p51s Firmware: affected versions not specified
  • Lenovo Thiankpad p52s Firmware: affected versions not specified
  • Lenovo Thiankpad p70 Firmware: affected versions not specified
  • Lenovo Thiankpad s1 Yoga Firmware: affected versions not specified
  • Lenovo Thiankpad s430 Firmware: affected versions not specified
  • Lenovo Thiankpad t420 Firmware: affected versions not specified
  • Lenovo Thiankpad t420i Firmware: affected versions not specified
  • Lenovo Thiankpad x1 Extreme Firmware: affected versions not specified
  • Lenovo Thinkpad Helix Firmware: affected versions not specified
  • Lenovo Thinkpad s230u Firmware: affected versions not specified
  • Lenovo Thinkpad t420s Firmware: affected versions not specified
  • Lenovo Thinkpad t420si Firmware: affected versions not specified
  • Lenovo Thinkpad t430i Firmware: affected versions not specified
  • Lenovo Thinkpad t430s Firmware: affected versions not specified
  • Lenovo Thinkpad t431s Firmware: affected versions not specified
  • Lenovo Thinkpad t440 Firmware: affected versions not specified
  • Lenovo Thinkpad t440p Firmware: affected versions not specified
  • Lenovo Thinkpad t440s Firmware: affected versions not specified
  • Lenovo Thinkpad t460s Firmware: affected versions not specified
  • and 34 more

Published 2019-01-24. Last modified 2026-06-17.