← back
CVE-2023-4936

Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading

CVSS 5.5 MEDIUMEPSS 0.2%CWE-269
It is possible to sideload a compromised DLL during the installation at elevated privilege.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Affected products
Synaptics · DisplayLink USB Graphics Software for Windows

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.synaptics.com/https://www.synaptics.com/products/displaylink-graphics/downloads/windowshttps://www.synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oct2023.pdf