synced 2 MIN AGO
01 Record

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected

UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector

02 Description

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
1.21% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 68.3% of scored records. A rank, not a probability.
NVD base score
6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2019-08-28 23:01Z7 YR AGO
Last updated
2024-08-04 22:32Z2 YR AGO
Reserved
2019-04-03
Assigning CNA
mitre
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
No CWE assigned
Data version
5.1
Document digest
d64261e546d0304dd60fc8ce079dfce3172f77e571805ddee335cc328bb1e5a0

05 Affected products

VendorProductVersionsPlatforms
lenovo100e_2nd_genNot specified—
lenovo100e_2nd_gen_firmwareNot specified—
lenovo300e_2nd_genNot specified—
lenovo300e_2nd_gen_firmwareNot specified—
lenovo330-14ikbrNot specified—
lenovo330-14ikbr_firmwareNot specified—
lenovo330-15ikbrNot specified—
lenovo330-15ikbr_firmwareNot specified—
lenovo330-15ikbr_touchNot specified—
lenovo330-15ikbr_touch_firmwareNot specified—
lenovo330-17ikbrNot specified—
lenovo330-17ikbr_firmwareNot specified—
lenovo720s-15ikbNot specified—
lenovo720s-15ikb_firmwareNot specified—
lenovo720s_touch-15ikbNot specified—
lenovo720s_touch-15ikb_firmwareNot specified—
lenovoaio310-20iapNot specified—
lenovoaio310-20iap_firmwareNot specified—
lenovoaio510-22ishNot specified—
lenovoaio510-22ish_firmwareNot specified—
lenovoaio510-23ishNot specified—
lenovoaio510-23ish_firmwareNot specified—
lenovoaio520-22iklNot specified—
lenovoaio520-22ikl_firmwareNot specified—
lenovoaio520-22ikuNot specified—
lenovoaio520-22iku_firmwareNot specified—
lenovoaio520-24iklNot specified—
lenovoaio520-24ikl_firmwareNot specified—
lenovoaio520-24ikuNot specified—
lenovoaio520-24iku_firmwareNot specified—
lenovoaio520-27iklNot specified—
lenovoaio520-27ikl_firmwareNot specified—
lenovoaio720-24ikbNot specified—
lenovoaio720-24ikb_firmwareNot specified—
lenovob330-15ikbrNot specified—
lenovob330-15ikbr_firmwareNot specified—
lenovoe43-80Not specified—
lenovoe43-80_firmwareNot specified—
lenovoe53-80Not specified—
lenovoe53-80_firmwareNot specified—
lenovoflex_5-1470(r)Not specified—
lenovoflex_5-1470(r)_firmwareNot specified—
lenovoflex_5-1570(r)Not specified—
lenovoflex_5-1570(r)_firmwareNot specified—
lenovoideacentre_520s-23ikuNot specified—
lenovoideacentre_520s-23iku_firmwareNot specified—
lenovok42-80Not specified—
lenovok42-80_firmwareNot specified—
lenovok43c-80Not specified—
lenovok43c-80_firmwareNot specified—
lenovolegion_y520t_z370Not specified—
lenovolegion_y520t_z370_firmwareNot specified—
lenovomiix_520-12ikbNot specified—
lenovomiix_520-12ikb_firmwareNot specified—
lenovomiix_525-12ikbNot specified—
lenovomiix_525-12ikb_firmwareNot specified—
lenovothinkcentre_m700zNot specified—
lenovothinkcentre_m700z_firmwareNot specified—
lenovothinkcentre_m800zNot specified—
lenovothinkcentre_m800z_firmwareNot specified—

140 further entries not shown. The complete list is in the raw JSON document.

06 References