CVE-2017-8360

MEDIUM 5.5CVE-2017-8360 · Published 12/05/2017 · updated 17/06/2026

In short

CVE-2017-8360 is a MEDIUM (CVSS 5.5) vulnerability affecting mictray64 (conexant).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mictray64 conexant	`≤ 1.0.0.46`	No fix yet

Description

Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\Users\Public\MicTray.log by any process.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free