CVE-2021-42205: Lenovo Elan Miniport Touchpad Driver

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice.

Affected products

• Lenovo Elan Miniport Touchpad Driver: before 24.21.51.2 (fixed in 24.21.51.2)

Published 2022-11-07. Last modified 2026-06-17.