CVE-2024-9157CWE-284

Privilege Escalation Vulnerability in CxUIUSvc service

High · published March 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

** UNSUPPORTED WHEN ASSIGNED **

A privilege escalation vulnerability in CxUIUSvc64.exe and

CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized

attacker to load a DLL in a privileged process.

Out of an abundance of caution, this CVE ID is being

assigned to better serve our customers and ensure all who are still running

this product understand that the product is End-of-Life and should be removed.

For more information on this, refer to the CVE Record’s reference information.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00346 · 26.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-03-11T16:28Z
EPSS history
Timeline
  • 11 MAR 16:28Z
    Privilege Escalation Vulnerability in CxUIUSvc service
    cvelistv5