CVE-2015-3320

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output.

• CWE-200

• http://www.securityfocus.com/bid/74196Third Party Advisory, VDB Entry
• https://support.lenovo.com/us/en/product_security/usbenhancedkeyboardPatch, Vendor Advisory
• http://www.securityfocus.com/bid/74196Third Party Advisory, VDB Entry
• https://support.lenovo.com/us/en/product_security/usbenhancedkeyboardPatch, Vendor Advisory

Published

Apr 16, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3314SQL injection vulnerability in WordPress Tune Library plugin…
• CVE-2015-3315Automatic Bug Reporting Tool (ABRT) allows local users to re…
• CVE-2015-3316CA Common Services, as used in CA Client Automation r12.5 SP…
• CVE-2015-3317CA Common Services, as used in CA Client Automation r12.5 SP…
• CVE-2015-3318CA Common Services, as used in CA Client Automation r12.5 SP…
• CVE-2015-3319Hotspot Express hotEx Billing Manager 73 does not include th…
• CVE-2015-3321Services and files in Lenovo Fingerprint Manager before 8.01…
• CVE-2015-3322Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 ser…
• CVE-2015-3323The ThinkServer System Manager (TSM) Baseboard Management Co…
• CVE-2015-3324The ThinkServer System Manager (TSM) Baseboard Management Co…
• CVE-2015-3325SQL injection vulnerability in forum.php in the WP Symposium…
• CVE-2015-3326Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 befo…