CVE-2019-25285: Alps Device Controller

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the service restarts or the system reboots.

Affected products

• Alps Device Controller: version 8.1202.1711.04 only

Published 2026-02-05. Last modified 2026-06-17.