What’s Vulnerable › Vulnerabilities

CVE-2017-3767

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-13 · updated 2026-06-17

Description

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

Affected products

• Lenovo Group Ltd. Realtek Audio Driver: before 6.0.1.8224 — fixed in 6.0.1.8224

How to fix

Upgrade to a fixed version: Lenovo Group Ltd. Realtek Audio Driver 6.0.1.8224. Check the vendor advisory for mitigations.

References

• https://support.lenovo.com/us/en/product_security/LEN-15759
• https://support.lenovo.com/us/en/product_security/LEN-15759

Get alerted when CVE-2017-3767 or the next vulnerability affects your stack