The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path D…

published 2020-08-12 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-7583

cvss: 6.7; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 42%
public exploits: 0; none known

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.

Patch / fix

fixed in 14

hp elite_x2_1012_g1_firmware 8.2206.1717.166
hp elite_x2_1012_g2_firmware 8.2206.1717.634
hp elitebook_1030_g1_firmware 8.2206.1717.166
hp elitebook_1040_g4_firmware 8.2206.1717.634
hp elitebook_folio_1040_g3_firmware 8.2206.1717.166
hp elitebook_folio_g1_firmware 8.2206.1717.166
hp elitebook_revolve_810_g2_firmware 10.1201.1717.108
hp elitebook_revolve_810_g3_firmware 10.1201.1717.108
hp elitebook_x360_1020_g2_firmware 8.2206.1717.634
hp elitebook_x360_1030_g2_firmware 8.2206.1717.634
hp pro_x2_612_g2_firmware 8.2206.1717.634
hp zbook_studio_g3_firmware 8.2206.1717.166
hp zbook_studio_g4_firmware 8.2206.1717.634
hp zbook_x2_g4_firmware 8.2206.1717.634

Exploit prediction

0.48% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.1	6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	4.6	AV:L/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

CWE-427 Uncontrolled Search Path Element

References

support.hp.com /document/c06706305
vendor-advisory
seclists.org /fulldisclosure/2020/Jul/30
mailing-list, third-party-advisory

Sources

CVE List CVE-2020-15596
NVD CVE-2020-15596

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary