VulnerabilityPublished 13 Aug 2026

CVE-2026-14256: Lenovo E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) – ThinkPad · Out-of-bounds Read

Affects Lenovo E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) – ThinkPadSource CVE Database V5

Compare

Not known to be exploited · CVSS 5.7 Medium : upgrade to 31.21.60.1 when convenient.

Data as of 12 Nov 2026, 23:24 UTC

CVSS 4.0 base score

5.7Medium

How severe the flaw is on the 0–10 CVSS scale.

EPSS: 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in 31.21.60.1, 27.4.17.1

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Attack Vector: Local
Attack Complexity: High
Attack Requirements: Present
Privileges Required: Low
User Interaction: None
Vulnerable system confidentiality: None
Vulnerable system integrity: None
Vulnerable system availability: High
Subsequent system confidentiality: None
Subsequent system integrity: None
Subsequent system availability: None

Bold values are the worst case: easiest to exploit or largest impact.

Attack Vector: Local: The vulnerable system is not bound to the network stack and the attacker’s path is via read/write/execute capabilities. Either the attacker exploits the vulnerability by accessing the target system locally (e.g., keyboard, console), or through terminal emulation (e.g., SSH); or the attacker relies on User Interaction by another person to perform actions required to exploit the vulnerability (e.g., using social engineering techniques to trick a legitimate user into opening a malicious document).
Attack Complexity: High: The successful attack depends on the evasion or circumvention of security-enhancing techniques in place that would otherwise hinder the attack. These include: Evasion of exploit mitigation techniques, for example, circumvention of address space randomization (ASLR) or data execution prevention (DEP) must be performed for the attack to be successful; Obtaining target-specific secrets. The attacker must gather some target-specific secret before the attack can be successful. A secret is any piece of information that cannot be obtained through any amount of reconnaissance. To obtain the secret the attacker must perform additional attacks or break otherwise secure measures (e.g. knowledge of a secret key may be needed to break a crypto channel). This operation must be performed for each attacked target.
Attack Requirements: Present: The successful attack depends on the presence of specific deployment and execution conditions of the vulnerable system that enable the attack. These include: a race condition must be won to successfully exploit the vulnerability (the successfulness of the attack is conditioned on execution conditions that are not under full control of the attacker, or the attack may need to be launched multiple times against a single target before being successful); the attacker must inject themselves into the logical network path between the target and the resource requested by the victim (e.g. vulnerabilities requiring an on-path attacker).
Privileges Required: Low: The attacker requires privileges that provide basic capabilities that are typically limited to settings and resources owned by a single low-privileged user. Alternatively, an attacker with Low privileges has the ability to access only non-sensitive resources.
User Interaction: None: The vulnerable system can be exploited without interaction from any human user, other than the attacker.
Vulnerable system confidentiality: None: There is no loss of confidentiality within the Vulnerable System.
Vulnerable system integrity: None: There is no loss of integrity within the Vulnerable System.
Vulnerable system availability: High: There is a total loss of availability, resulting in the attacker being able to fully deny access to resources in the Vulnerable System; this loss is either sustained (while the attacker continues to deliver the attack) or persistent (the condition persists even after the attack has completed). Alternatively, the attacker has the ability to deny some availability, but the loss of availability presents a direct, serious consequence to the Vulnerable System (e.g., the attacker cannot disrupt existing connections, but can prevent new connections; the attacker can repeatedly exploit a vulnerability that, in each instance of a successful attack, leaks a only small amount of memory, but after repeated exploitation causes a service to become completely unavailable).
Subsequent system confidentiality: None: There is no loss of confidentiality within the Subsequent System or all confidentiality impact is constrained to the Vulnerable System.
Subsequent system integrity: None: There is no loss of integrity within the Subsequent System or all integrity impact is constrained to the Vulnerable System.
Subsequent system availability: None: There is no impact to availability within the Subsequent System or all availability impact is constrained to the Vulnerable System.

Definitions: FIRST CVSS v4.0 specification.

Exploitation evidence

Disclosed: evidence found.
CVE published 13 Aug 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponized: A Metasploit exploit module or Exploit-DB entry exists (Metasploit scanner modules do not count), or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

ghsa-pxj5-5rw9-phjp

What to do

Upgrade E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and P16s Gen 4 (Type 21QR, 21QS) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and P16s Gen 4 (Type 21RX, 21RY) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and T16 Gen 4 (Type 21QN, 21QQ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and P14s Gen 6 (Type 21RV, 21RW) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and T14 Gen 6 (Type 21QJ, 21QK) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and L14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and L13 2-in-1 Gen 6 (Type 21RD, 21RE) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and L16 Gen 2 (Type 21RH, 21RJ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad and T1g Gen 8 (Type 21TD, 21TE) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P1 Gen 8 (Type 21Q8, 21Q9), T1g Gen 8 (Type 21TD, 21TE) and P1 Gen 8 (Type 21Q8, 21Q9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P1 Gen 8 (Type 21Q8, 21Q9), T1g Gen 8 (Type 21TD, 21TE) and P16 Gen 3 (Type 21RQ, 21RR) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16 Gen 3 (Type 21RQ, 21RR), T16g Gen 3 (Type 21V5, 21V6) and T16g Gen 3 (Type 21V5, 21V6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16 Gen 3 (Type 21RQ, 21RR), T16g Gen 3 (Type 21V5, 21V6) and P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16v Gen 3 (Type 21RS, 21RT) and T14p Gen 3 (Type 21RU, 22A3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) and P16s Gen 4 (Type 21QV, 21QW) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) and P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) and E14 Gen 7 (Type 21U2, 21U3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0) and L14p Gen 6 (Type 22B1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0) and E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0) and E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T0, 21T1), E16 Gen 3 (Type 21ST, 21SU) and E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T0, 21T1), E16 Gen 3 (Type 21ST, 21SU) and X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad X13 Gen 6 (Type 21RM, 21RN) and T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14s Gen 6 (Type 21TB, 21TC) and T14 Gen 6 (Type 21QC, 21QD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 and T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 and T14 Gen 6 (Type 21QG, 21QH) Laptops (ThinkPad ) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 and T14s 2-in-1 Gen 1 (Type 21R3, 21R4) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - T14s 2-in-1 Gen 1 (Type 21R3, 21R4), T14s Gen 6 (Type 21R1, 21R2) and T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - T14s 2-in-1 Gen 1 (Type 21R3, 21R4), T14s Gen 6 (Type 21R1, 21R2) and Z13 Gen 2 (Type 21JV, 21JW) Laptop (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 and Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 and Z13 Gen 2 (Type 21JV, 21JW) Laptop (ThinkPad) ELAN TrackPoint Device Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 and Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) ELAN TrackPoint Device Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 and X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) and T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) Elan Trackpoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14s Gen 6 (Type 21M1, 21M2) and P14s Gen 3 (Type 21AK, 21AL) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or Later) - ThinkPad and T16 Gen 1 (Type 21BV, 21BW) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or Later) - ThinkPad and P16s Gen 1 (Type 21BT, 21BU) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or Later) - ThinkPad and T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or Later) - ThinkPad and X13 Gen 3 (Type 21BN 21BQ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or Later) - ThinkPad and T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or Later) - ThinkPad and P14s Gen 3 (Type 21AK, 21AL) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T16 Gen 1 (Type 21BV, 21BW) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and P16s Gen 1 (Type 21BT, 21BU) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and X13 Gen 3 (Type 21BN 21BQ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T14 Gen 3 (Type 21CF, 21CG) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T16 Gen 1 (Type 21CH, 21CJ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and P16s Gen 1 (Type 21CK, 21CL) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and X13 Gen 3 (Type 21CM 21CN) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and P14s Gen 3 (Type 21J5, 21J6) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad and T14s Gen 2 (Type 20WM, 20WN) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or Later) - ThinkPad and X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or Later) - ThinkPad and T14s Gen 2 (type 20XF, 20XG) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or Later) - ThinkPad and X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later), 10 (Version 1909 or Later) - ThinkPad and P14s Gen 3 (Type 21AK, 21AL) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 10 (Version 20H2 or Later) - ThinkPad and T16 Gen 1 (Type 21BV, 21BW) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 10 (Version 20H2 or Later) - ThinkPad and P16s Gen 1 (Type 21BT, 21BU) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 10 (Version 20H2 or Later) - ThinkPad and T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 10 (Version 20H2 or Later) - ThinkPad and X13 Gen 3 (Type 21BN 21BQ) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 10 (Version 20H2 or Later) - ThinkPad and T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 10 (Version 20H2 or Later) - ThinkPad and L14p Gen 6 (Type 21UA) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21SX, 21SY), E16 Gen 3 (Type 21SR, 21SS) and E14 Gen 7 (Type 21SX, 21SY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21SX, 21SY), E16 Gen 3 (Type 21SR, 21SS) and E16 Gen 3 (Type 21SR, 21SS) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21SX, 21SY), E16 Gen 3 (Type 21SR, 21SS) and P14s Gen 5 (Type 21ME, 21MF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad T14 Gen 5 (Type 21MC, 21MD), P14s Gen 5 (Type 21ME, 21MF) and T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad T14 Gen 5 (Type 21MC, 21MD), P14s Gen 5 (Type 21ME, 21MF) and R14 Gen 6 (Type 21M9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad E14 Gen 6 (Type 21M7, 21M8), E16 Gen 2 (Type 21MA, 21MB) and E14 Gen 6 (Type 21M7, 21M8) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad E14 Gen 6 (Type 21M7, 21M8), E16 Gen 2 (Type 21MA, 21MB) and E16 Gen 2 (Type 21MA, 21MB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad E14 Gen 6 (Type 21M7, 21M8), E16 Gen 2 (Type 21MA, 21MB) and E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad E14 Gen 6 (Type 21M3, 21M4), E16 Gen 2 (Type 21M5, 21M6) and E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad E14 Gen 6 (Type 21M3, 21M4), E16 Gen 2 (Type 21M5, 21M6) and X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad X13 Gen 6 (Type 21RK, 21RL) and T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14s Gen 6 (Type 21QX, 21QY) and L14p Gen 6 (Type 21UB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T9, 21TA), E16 Gen 3 (Type 21TF, 21TG) and E16 Gen 3 (Type 21TF, 21TG) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T9, 21TA), E16 Gen 3 (Type 21TF, 21TG) and E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T9, 21TA), E16 Gen 3 (Type 21TF, 21TG) and X1 2-in-1 Gen 10 (Type 21Q0, 21Q1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad X1 2-in-1 Gen 10 (Type 21Q0, 21Q1), X1 Carbon 13th Gen (Type 21NX, 21NY) and X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad X1 2-in-1 Gen 10 (Type 21Q0, 21Q1), X1 Carbon 13th Gen (Type 21NX, 21NY) and P16s Gen 4 (Type 21QR, 21QS) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6, P16s Gen 4, T14 Gen 6, T16 Gen 4 and P16s Gen 4 (Type 21RX, 21RY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6, P16s Gen 4, T14 Gen 6, T16 Gen 4 and T16 Gen 4 (Type 21QN, 21QQ) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6, P16s Gen 4, T14 Gen 6, T16 Gen 4 and P14s Gen 6 (Type 21RV, 21RW) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6, P16s Gen 4, T14 Gen 6, T16 Gen 4 and T14 Gen 6 (Type 21QJ, 21QK) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6, P16s Gen 4, T14 Gen 6, T16 Gen 4 and P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6, P16s Gen 4, T14 Gen 6, T16 Gen 4 and T14p Gen 1 (Type 21J7) (PRC Only) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and R14 Gen 6 (Type 21M9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E14 Gen 6 (Type 21M7, 21M8) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E16 Gen 2 (Type 21MA, 21MB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and X1 Carbon 13th Gen (Type 21NS, 21NT) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L14p Gen 6 (Type 21UB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L14p Gen 6 (Type 21UA) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and S2 2 in 1 Gen 10 (Type 21RA) China Only Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and S2 Gen 10 Type 21R9 China Only Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E14 Gen 7 (Type 21SX, 21SY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E16 Gen 3 (Type 21SR, 21SS) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E16 Gen 3 (Type 21TF, 21TG) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and X1 2-in-1 Gen 10 (Type 21Q0, 21Q1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T14 Gen 6 (Type 21QC, 21QD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T14 Gen 6 (Type 21QG, 21QH) Laptops (ThinkPad ) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L16 Gen 2 (Type 21SA, 21SB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T14s 2-in-1 Gen 1 (Type 21R3, 21R4) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T14p Gen 3 (Type 21RU, 22A3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L13 Gen 6 (Type 21R5, 21R6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E14 Gen 7 (Type 21U2, 21U3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and P16s Gen 4 (Type 21QV, 21QW) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and P16 Gen 3 (Type 21RQ, 21RR) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T1g Gen 8 (Type 21TD, 21TE) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and P1 Gen 8 (Type 21Q8, 21Q9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and L14p Gen 6 (Type 22B1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T16g Gen 3 (Type 21V5, 21V6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 21H2 or later) - ThinkPad and E16 Gen 1 (Type 21JT, 21JU) Laptop (Thinkpad) ELAN Trackpoint Driver for Windows 11 (Version 22H2 or later), 10 (Version 22H2 or later) - ThinkPad E14 Gen 5 (Type 21JR, 21JS), E16 Gen 1 (Type 21JT, 21JU) and E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) ELAN Trackpoint Driver for Windows 11 (Version 22H2 or later), 10 (Version 22H2 or later) - ThinkPad E14 Gen 5 (Type 21JR, 21JS), E16 Gen 1 (Type 21JT, 21JU) to 31.21.60.1; 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) ELAN HID Class Filter Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2) and 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) ELAN HID Class Filter Driver for Windows 11 (Version 21H2), 10 (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2) and 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) and 100w Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300w Yoga Gen 4, 500w Yoga Gen 4 and 300w Yoga Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300w Yoga Gen 4, 500w Yoga Gen 4 and 500w Yoga Gen 4 Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 22H2 or later) - Lenovo 100w Gen 4, 300w Yoga Gen 4, 500w Yoga Gen 4 and 100w Gen 5 (Type 83LD, 83LE) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Lenovo 100w Gen 5, 300w 2-in-1 Gen 5, 500w 2-in-1 Gen 5 and 300w 2-in-1 Gen 5 (Type 83LF, 83LG) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Lenovo 100w Gen 5, 300w 2-in-1 Gen 5, 500w 2-in-1 Gen 5 and 500w 2-in-1 Gen 5 (Type 83LH, 83LJ) Laptop (Lenovo) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - Lenovo 100w Gen 5, 300w 2-in-1 Gen 5, 500w 2-in-1 Gen 5 and 13w 2-in-1 Gen 3 (Type 83M9, 83MA) Elan Touchpad Driver for Windows 11 (Version 23H2 or later) - Lenovo 13w 2-in-1 Gen 3 (Type 83M9, 83MA) to 27.4.17.1.

Affected software

Product	Affected	Fixed in
LenovoE16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad	Affected <31.21.60.1	Fixed in 31.21.60.1
LenovoE14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad	Affected <31.21.60.1	Fixed in 31.21.60.1
LenovoT14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad	Affected <31.21.60.1	Fixed in 31.21.60.1
LenovoP16s Gen 4 (Type 21QR, 21QS) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad	Affected <31.21.60.1	Fixed in 31.21.60.1
LenovoP16s Gen 4 (Type 21RX, 21RY) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad	Affected <31.21.60.1	Fixed in 31.21.60.1
LenovoT16 Gen 4 (Type 21QN, 21QQ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad	Affected <31.21.60.1	Fixed in 31.21.60.1

AI-suggested

If you cannot patch yet, limit local access to trusted users and monitor for unusual system crashes related to the ELAN TrackPoint driver.

Description

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

CWE-125Out-of-bounds Read (opens in a new tab)
Base weaknessCWE Top 25 (2025): #8
The product reads data past the end, or before the beginning, of the intended buffer.
Implementation · Input Validation
Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does.
Architecture and Design · Language Selection
Use a language that provides appropriate memory abstractions.
OWASP Cheat Sheets
XML Security (opens in a new tab)
Mass Assignment (opens in a new tab)
OWASP ASVS 4.0.3
V13.3.1 (opens in a new tab)
V5.1.4 (opens in a new tab)
V5.1.3 (opens in a new tab)
Attack patterns
Overread Buffers (opens in a new tab)
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).

References

support.lenovo.com/us/en/product_security/LEN-213604 (opens in a new tab)

Community reviews

Loading reviews…

Exploitation evidence

What to do

Affected software

Description

AI analysisMachine-generated, updated 13 Aug 2026, 15:59 UTC

WeaknessesCWE-125

Technical details

References

Community reviews

Related threats