What is CVE-2019-6165?

CVE-2019-6165 is a high-severity vulnerability in Lenovo Paperdisplay Hotkey Service, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2019-08-19.

How severe is CVE-2019-6165?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Lenovo Paperdisplay Hotkey Service

CVE-2019-6165

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features.

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Lenovo Paperdisplay Hotkey Service — versions unspecified
Lenovo Yoga_700-11isk
Lenovo Yoga_700-11isk_firmware
Lenovo Yoga_700-14isk
Lenovo Yoga_700-14isk_firmware

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

psirt@lenovo.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6165?: CVE-2019-6165 is a high-severity vulnerability in Lenovo Paperdisplay Hotkey Service, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2019-08-19.
How severe is CVE-2019-6165?: High severity. CVSS v3 base score is 7.8 out of 10.