← Vulnerability feed

Vulnerability record · CVE-2019-19705 · published 26 December 2022

CVE-2019-19705: Lenovo ideacentre 510-15ikl firmware unquoted search path vulnerability

Lenovo · Ideacentre 510 15ikl Firmware

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.

7.8 CVSS 3.1 High EPSS 0.21% · top 89.5% CWE-428 · Unquoted search path
7.8CVSS 3.1 base score
0.21%EPSS exploitation probability, 30 days
NoNot in CISA KEV
136Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

136 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.lenovo.com/us/en/product_security/ps500315-realtek-audio-driver-vulnerability Vendor Advisory
https://support.lenovo.com/us/en/product_security/ps500315-realtek-audio-driver-vulnerability Vendor Advisory

Track CVE-2019-19705 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.5CVE-2019-10724Lenovo legion y520t z370 firmware vulnerabilityThere is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at…EPSS 1.2%3.3CVE-2019-6156Lenovo 510-15ikl firmware vulnerabilityIn Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer o…EPSS 0.24%

Source: NIST National Vulnerability Database (record CVE-2019-19705), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.