CVE-2024-9157: Privilege Escalation Vulnerability in CxUIUSvc service
UNSUPPORTED WHEN ASSIGNED
A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process.
Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record’s reference information.
Other sources
Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9157?
CVE-2024-9157 is classified as a privilege escalation vulnerability.
How do I fix CVE-2024-9157?
To mitigate CVE-2024-9157, ensure you are using the latest version of Synaptics audio drivers and apply all available security patches.
Who is affected by CVE-2024-9157?
CVE-2024-9157 affects users of the Synaptics audio drivers for both x64 and x86 systems.
What are the potential consequences of CVE-2024-9157?
If exploited, CVE-2024-9157 could allow a local authorized attacker to escalate privileges and execute malicious code.
Is CVE-2024-9157 still being supported?
CVE-2024-9157 may be considered unsupported since it has been assigned a status indicating limited support.