7.8
HIGH
CVE-2018-16098
Lenovo ThinkPads Synaptics Pointing Device Unquoted Search Path Privilege Escalation
Description

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

INFO

Published Date :

Jan. 24, 2019, 10:29 p.m.

Last Modified :

Nov. 21, 2024, 3:52 a.m.

Remotely Exploitable :

No

Impact Score :

5.9

Exploitability Score :

1.8
Affected Products

The following products are affected by CVE-2018-16098 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Lenovo thinkpad_t470_firmware
2 Lenovo thinkpad_t470s_firmware
3 Lenovo thinkpad_t570_firmware
4 Lenovo thinkpad_t580_firmware
5 Lenovo thinkpad_yoga_11e_firmware
6 Lenovo thinkpad_x1_carbon_firmware
7 Lenovo thinkpad_x1_yoga_firmware
8 Lenovo thinkpad_x280_firmware
9 Lenovo thinkpad_t470
10 Lenovo thinkpad_t470s
11 Lenovo thinkpad_t570
12 Lenovo thinkpad_t580
13 Lenovo thinkpad_x1_carbon
14 Lenovo thinkpad_x1_yoga
15 Lenovo thinkpad_x280
16 Lenovo thinkpad_helix_firmware
17 Lenovo thinkpad_t440_firmware
18 Lenovo thinkpad_t440s_firmware
19 Lenovo thinkpad_t440p_firmware
20 Lenovo thinkpad_t460s_firmware
21 Lenovo thinkpad_t540p_firmware
22 Lenovo thinkpad_t550_firmware
23 Lenovo thinkpad_t560_firmware
24 Lenovo thinkpad_w540_firmware
25 Lenovo thinkpad_w541_firmware
26 Lenovo thinkpad_w550s_firmware
27 Lenovo thinkpad_x240_firmware
28 Lenovo thinkpad_x240s_firmware
29 Lenovo thinkpad_x250_firmware
30 Lenovo thinkpad_t540_firmware
31 Lenovo synaptics_thinkpad_ultranav_driver
32 Lenovo thiankpad_l430_firmware
33 Lenovo thiankpad_l530_firmware
34 Lenovo thiankpad_p1_firmware
35 Lenovo thiankpad_x1_extreme_firmware
36 Lenovo thiankpad_p50s_firmware
37 Lenovo thiankpad_p51_firmware
38 Lenovo thiankpad_p51s_firmware
39 Lenovo thiankpad_p52s_firmware
40 Lenovo thiankpad_p70_firmware
41 Lenovo thiankpad_s1_yoga_firmware
42 Lenovo thiankpad_s430_firmware
43 Lenovo thiankpad_t420_firmware
44 Lenovo thiankpad_t420i_firmware
45 Lenovo thinkpad_t420s_firmware
46 Lenovo thinkpad_t420si_firmware
47 Lenovo thinkpad_t430s_firmware
48 Lenovo thinkpad_t430i_firmware
49 Lenovo thinkpad_t431s_firmware
50 Lenovo thinkpad_t520_firmware
51 Lenovo thinkpad_t520i_firmware
52 Lenovo thinkpad_t530_firmware
53 Lenovo thinkpad_t530i_firmware
54 Lenovo thinkpad_twist_firmware
55 Lenovo thinkpad_s230u_firmware
56 Lenovo thinkpad_w530_firmware
57 Lenovo thinkpad_x1_firmware
58 Lenovo thinkpad_x1_hybrid_firmware
59 Lenovo thinkpad_x220_firmware
60 Lenovo thinkpad_x220i_firmware
61 Lenovo thinkpad_x220_tablet_firmware
62 Lenovo thinkpad_x230_firmware
63 Lenovo thinkpad_x230i_firmware
64 Lenovo thinkpad_x230_tablet_firmware
65 Lenovo thinkpad_x230i_tablet_firmware
66 Lenovo thinkpad_x230s_firmware
67 Lenovo thinkpad_t440
68 Lenovo thinkpad_t440p
69 Lenovo thinkpad_t440s
70 Lenovo thinkpad_t460s
71 Lenovo thinkpad_t540
72 Lenovo thinkpad_t540p
73 Lenovo thinkpad_t550
74 Lenovo thinkpad_t560
75 Lenovo thinkpad_w540
76 Lenovo thinkpad_w541
77 Lenovo thinkpad_w550s
78 Lenovo thinkpad_x240
79 Lenovo thinkpad_x240s
80 Lenovo thinkpad_yoga_11e
81 Lenovo thinkpad_x250
82 Lenovo thinkpad_helix
83 Lenovo thiankpad_l430
84 Lenovo thiankpad_l530
85 Lenovo thiankpad_p1
86 Lenovo thiankpad_x1_extreme
87 Lenovo thiankpad_p50s
88 Lenovo thiankpad_p51
89 Lenovo thiankpad_p51s
90 Lenovo thiankpad_p52s
91 Lenovo thiankpad_p70
92 Lenovo thiankpad_s1_yoga
93 Lenovo thiankpad_s430
94 Lenovo thiankpad_t420
95 Lenovo thiankpad_t420i
96 Lenovo thinkpad_t420s
97 Lenovo thinkpad_t420si
98 Lenovo thinkpad_t430s
99 Lenovo thinkpad_t430i
100 Lenovo thinkpad_t431s
101 Lenovo thinkpad_t520
102 Lenovo thinkpad_t520i
103 Lenovo thinkpad_t530
104 Lenovo thinkpad_t530i
105 Lenovo thinkpad_twist
106 Lenovo thinkpad_s230u
107 Lenovo thinkpad_w530
108 Lenovo thinkpad_x1
109 Lenovo thinkpad_x1_hybrid
110 Lenovo thinkpad_x220
111 Lenovo thinkpad_x220i
112 Lenovo thinkpad_x220_tablet
113 Lenovo thinkpad_x230
114 Lenovo thinkpad_x230i
115 Lenovo thinkpad_x230_tablet
116 Lenovo thinkpad_x230i_tablet
117 Lenovo thinkpad_x230s
1 Microsoft windows_10
2 Microsoft windows_7
3 Microsoft windows_8.1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2018-16098.

URL Resource
https://support.lenovo.com/us/en/solutions/LEN-24573 Broken Link
https://support.lenovo.com/bg/en/product_security/len-24573 Patch Vendor Advisory
https://support.lenovo.com/us/en/solutions/LEN-24573 Broken Link

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2018-16098 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2018-16098 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://support.lenovo.com/us/en/solutions/LEN-24573
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CPE Deprecation Remap by [email protected]

    May. 08, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:microsoft:windows_8.1:-:-:-:*:-:-:*:* OR *cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:pro_n:*:*:*
  • Initial Analysis by [email protected]

    Feb. 22, 2019

    Action Type Old Value New Value
    Added CVSS V2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)
    Added CVSS V3 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://support.lenovo.com/us/en/solutions/LEN-24573 No Types Assigned https://support.lenovo.com/us/en/solutions/LEN-24573 Broken Link
    Added Reference https://support.lenovo.com/bg/en/product_security/len-24573 [Patch, Vendor Advisory]
    Added CWE CWE-428
    Added CPE Configuration AND OR *cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.0.7.119:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:-:-:*:-:-:*:*
    Added CPE Configuration AND OR *cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.5.19.33:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.0.17.140:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:19.3.4.219:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:16.2.19.23:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:a:lenovo:synaptics_thinkpad_ultranav_driver:18.1.27.42:*:*:*:*:*:*:* OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_helix_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_l430_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_l430:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_l530_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_l530:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_p1_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_p1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_x1_extreme_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_x1_extreme:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_p50s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_p50s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_p51_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_p51:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_p51s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_p51s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_p52s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_p52s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_p70_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_p70:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_s1_yoga_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_s1_yoga:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_s430_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_s430:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_t420_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_t420:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thiankpad_t420i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thiankpad_t420i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t420s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t420s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t420si_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t420si:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t430s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t430s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t430i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t430i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t430s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t430s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t431s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t431s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t440_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t440s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t440p_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t460s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t470_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t470s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t430s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t430s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t520_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t520:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t520i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t520i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t530_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t530:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t530i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t530i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t540_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t540:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t540p_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t550_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t560_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t570_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_t580_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_twist_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_twist:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_s230u_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_s230u:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_w530_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_w530:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_w540_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_w541_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_w550s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x1_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x1_hybrid_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x1_hybrid:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x220_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x220:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x220i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x220i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x220_tablet_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x220_tablet:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x230_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x230:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x230i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x230i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x230_tablet_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x230_tablet:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x230i_tablet_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x230i_tablet:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x230s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x230s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x240s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x240_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x250_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_x280_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Jan. 25, 2019

    Action Type Old Value New Value
    Removed Reference https://support.lenovo.com/us/en/solutions/LEN-24503 [No Types Assigned]
    Added Reference https://support.lenovo.com/us/en/solutions/LEN-24573 [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2018-16098 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2018-16098 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.10264

percentile

CVSS30 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability