CVE-2025-11772

MEDIUM EPSS 3.7%

Published Dec 1, 20257mo ago · Modified Jun 17, 20262w ago

6.6 CVSS 3.1

Medium

Published Dec 1, 2025 7mo ago

Last Modified Jun 17, 2026 2w ago

Description

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation.

CVSS Details

Base Score

6.6

Exploitability

0.7

Impact

5.9

Vector string

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Physical

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

3.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-427

References 1

synaptics.com https://www.synaptics.com/sites/default/files/2025-12/fingerprint-driver-co-installer-security-brief-2025-12-01.pdf

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.