Is CVE-2019-19705 actively exploited?

No active exploitation of CVE-2019-19705 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-19705 be exploited remotely?

No. CVE-2019-19705 requires local access to exploit.

What is the CVSS score of CVE-2019-19705?

CVE-2019-19705 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2019-19705

HIGH

CVE-2019-19705

CWE-428Published: December 26, 2022· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.

NVD Source

Technical Analysis

CVE-2019-19705 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.None

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Vendors & Products

Lenovo272 product(s)

ideacentre 510-15ikl firmwareideacentre 510-15iklideacentre 510s-08ikl firmwareideacentre 510s-08iklideacentre 300s-11ish firmwareideacentre 300s-11ishideacentre 310-15asr firmwareideacentre 310-15asrideacentre 310-15iap firmwareideacentre 310-15iapideacentre 310a-15iap firmwareideacentre 310a-15iap+260

Source: NVD CPE · 272 total CPE entries