CVE-2021-42205

MEDIUM 4.7CVE-2021-42205 · Published 07/11/2022 · updated 17/06/2026

In short

CVE-2021-42205 is a MEDIUM (CVSS 4.7) vulnerability affecting elan miniport touchpad driver (lenovo).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.1% of all vulnerabilities.
Fix: update to 24.21.51.2 or later.

Package	Affected versions	Patched versions
elan miniport touchpad driver lenovo	`< 24.21.51.2`	`24.21.51.2`

Description

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice.

References

emc.com.tw/upload/F2E/Vulnerability%20Report/Vulnerability%20Report_Miniport%20touchpad%20Windows%20driver_20221107.pdf · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free