Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2025-11772

Co-Installer Privilege Escalation

Description

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synaptics Synaptics Fingerprint Driver

Default version status: unaffected

  • 5.5.3521.1066 to < 5.5.3537.1066affected
  • 5.5.4012.1052 to < 5.5.4022.1052affected

References