CVE-2026-14256

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-13 · updated 2026-08-24
Weakness: CWE-125

Description

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

Affected products

Lenovo 100w Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300: before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 100w Gen 5 (Type 83LD, 83LE) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Leno: before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 11e Yoga Gen 6 (Type 20SE, 20SF) Laptop (ThinkPad) Elan ClickPad Driver for Windows 11 (Version 21H2 or later), 1: through 24.21.50.4
Lenovo 13w 2-in-1 Gen 3 (Type 83M9, 83MA) Elan Touchpad Driver for Windows 11 (Version 23H2 or later) - Lenovo 13w 2-in-: before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - : before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) ELAN HID Class Filter Driver for Windows 11 (Version 21H2), 10 (Versio: before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) ELAN HID Class Filter Driver for Windows 11 (Version 22H2 or later) - : before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 300w 2-in-1 Gen 5 (Type 83LF, 83LG) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later): before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 300w Yoga Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4: before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 500w 2-in-1 Gen 5 (Type 83LH, 83LJ) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later): before 27.4.17.1 — fixed in 27.4.17.1
Lenovo 500w Yoga Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4: before 27.4.17.1 — fixed in 27.4.17.1
Lenovo E14 Gen 5 (Type 21JK, 21JL) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 : through 31.21.45.1
Lenovo E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 21H2 or later: through 31.21.45.1
Lenovo E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) ELAN Trackpoint Driver for Windows 11 (Version 22H2 or later), 10 (: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or late: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 6 (Type 21M7, 21M8) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 6 (Type 21M7, 21M8) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21SX, 21SY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21SX, 21SY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or late: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21U2, 21U3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E14 Gen 7 (Type 21U2, 21U3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - Th: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E16 Gen 1 (Type 21JN, 21JQ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (: through 31.21.45.1
Lenovo E16 Gen 1 (Type 21JT, 21JU) Laptop (Thinkpad) ELAN TrackPoint Device Driver for Windows 11 (Version 21H2 or later: through 31.21.45.1
Lenovo E16 Gen 1 (Type 21JT, 21JU) Laptop (Thinkpad) ELAN Trackpoint Driver for Windows 11 (Version 22H2 or later), 10 (: before 31.21.60.1 — fixed in 31.21.60.1
Lenovo E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or late: before 31.21.60.1 — fixed in 31.21.60.1

How to fix

Upgrade to a fixed version: Lenovo 100w Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300 27.4.17.1; Lenovo 100w Gen 5 (Type 83LD, 83LE) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Leno 27.4.17.1; Lenovo 13w 2-in-1 Gen 3 (Type 83M9, 83MA) Elan Touchpad Driver for Windows 11 (Version 23H2 or later) - Lenovo 13w 2-in- 27.4.17.1; Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - 27.4.17.1; Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) ELAN HID Class Filter Driver for Windows 11 (Version 21H2), 10 (Versio 27.4.17.1; Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) ELAN HID Class Filter Driver for Windows 11 (Version 22H2 or later) - 27.4.17.1; Lenovo 300w 2-in-1 Gen 5 (Type 83LF, 83LG) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) 27.4.17.1; Lenovo 300w Yoga Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4 27.4.17.1; Lenovo 500w 2-in-1 Gen 5 (Type 83LH, 83LJ) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) 27.4.17.1; Lenovo 500w Yoga Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4 27.4.17.1; Lenovo E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) ELAN Trackpoint Driver for Windows 11 (Version 22H2 or later), 10 ( 31.21.60.1; Lenovo E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or late 31.21.60.1. Check the vendor advisory for mitigations.

References

https://support.lenovo.com/us/en/product_security/LEN-213604

Get alerted when CVE-2026-14256 or the next vulnerability affects your stack