CVE-2024-9157

CVE-2024-9157 is a privilege escalation vulnerability in Synaptics audio drivers (CxUIUSvc64.exe and CxUIUSvc32.exe) that allows a local, authorized attacker to load a malicious DLL into a privileged process. This vulnerability is rated High severity (CVSS 7.8) due to its potential for complete compromise of confidentiality, integrity, and availability, with low attack complexity. Although the affected product is End-of-Life and should be removed, there is no evidence of active exploitation, public exploit code, or significant community discussion beyond a single mention and media article.