HP Synaptics Touchpad Driver vulnerabilities

2 CVEs affecting HP Synaptics Touchpad Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15532, published 2019-03-21.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15532, published 2019-03-21. Low severity, CVSS 3.8. EPSS: 0.7% chance of exploitation in the next 30 days. SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses.
• CVE-2017-17556, published 2017-12-15. Medium severity, CVSS 5.1. EPSS: 0.6% chance of exploitation in the next 30 days. A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys.