CVE-2024-9157
Privilege Escalation Vulnerability in CxUIUSvc service
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Privilege Escalation Vulnerability in CxUIUSvc service
** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record’s reference information.
Reserved 2024-09-24 | Published 2025-03-11 | Updated 2025-03-11 | Assigner SynapticsCWE-284 Improper Access Control
www.synaptics.com/...io-driver-security-brief-2025-03-11.pdf
Support options
