CVE-2019-6165

HIGH

Lenovo Yoga 700-11ISK/14ISK Firmware - Untrusted Search Path in PaperDisplay Hotkey Service

Title source: llm
STIX 2.1

Description

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.lenovo.com/solutions/LEN-27569

Scores

CVSS v3 7.8
EPSS 0.0007
EPSS Percentile 20.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-426
Status published
Products (2)
lenovo/yoga_700-11isk_firmware
lenovo/yoga_700-14isk_firmware
Published Aug 19, 2019
Tracked Since Feb 18, 2026