CVE-2017-3767

High

Description

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

SeverityHigh
CVSS7.8
Exploit probability—
ProductRealtek Audio Driver Firmware
PublishedNov 13, 2017
First seenNov 13, 2017

How to fix

Update
  • realtek audio_driver_firmware6.0.1.8224 or later

Affected products

ProductAffected versionsFixed in
realtek audio_driver_firmwarev < 6.0.1.82246.0.1.8224

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.