CVE-2026-14256
MEDIUMCVSS 4.7/10EPSS 0.09%
Last modified
CVE-2026-14256 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | P16s Gen 4 (Type 21QR, 21QS) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | P16s Gen 4 (Type 21RX, 21RY) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | T16 Gen 4 (Type 21QN, 21QQ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | P14s Gen 6 (Type 21RV, 21RW) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | T14 Gen 6 (Type 21QJ, 21QK) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | L14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | L13 2-in-1 Gen 6 (Type 21RD, 21RE) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | L16 Gen 2 (Type 21RH, 21RJ) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | < 31.21.60.1 |
| Lenovo | T1g Gen 8 (Type 21TD, 21TE) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P1 Gen 8 (Type 21Q8, 21Q9), T1g Gen 8 (Type 21TD, 21TE) | < 31.21.60.1 |
| Lenovo | P1 Gen 8 (Type 21Q8, 21Q9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P1 Gen 8 (Type 21Q8, 21Q9), T1g Gen 8 (Type 21TD, 21TE) | < 31.21.60.1 |
| Lenovo | P16 Gen 3 (Type 21RQ, 21RR) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16 Gen 3 (Type 21RQ, 21RR), T16g Gen 3 (Type 21V5, 21V6) | < 31.21.60.1 |
| Lenovo | T16g Gen 3 (Type 21V5, 21V6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16 Gen 3 (Type 21RQ, 21RR), T16g Gen 3 (Type 21V5, 21V6) | < 31.21.60.1 |
| Lenovo | P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16v Gen 3 (Type 21RS, 21RT) | < 31.21.60.1 |
| Lenovo | T14p Gen 3 (Type 21RU, 22A3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) | < 31.21.60.1 |
| Lenovo | P16s Gen 4 (Type 21QV, 21QW) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) | < 31.21.60.1 |
| Lenovo | P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) | < 31.21.60.1 |
| Lenovo | L14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) JYT TrackPoint Firmware for Windows 11 (Version 24H2) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD) | <= 41.71.2.15 |
| Lenovo | L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) JYT TrackPoint Firmware for Windows 11 (Version 24H2) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD) | <= 41.71.2.15 |
| Lenovo | L16 Gen 2 (Type 21RH, 21RJ) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21SE, 21SF), L16 Gen 2 (Type 21RH, 21RJ) | <= 31.21.49.1 |
| Lenovo | L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21SE, 21SF), L16 Gen 2 (Type 21RH, 21RJ) | <= 31.21.49.1 |
| Lenovo | E14 Gen 7 (Type 21U2, 21U3) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0) | < 31.21.60.1 |
| Lenovo | L14p Gen 6 (Type 22B1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0) | < 31.21.60.1 |
| Lenovo | E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21U2, 21U3), E16 Gen 3 (Type 22AY, 22B0) | < 31.21.60.1 |
| Lenovo | L13 2-in-1 Gen 6 (Type 21RD, 21RE) Laptops (ThinkPad) ELAN TrackPoint Driver For Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21RB, 21RC), L13 Gen 6 2-in-1 (Type 21RD, 21RE) | <= 31.21.49.1 |
| Lenovo | L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) ELAN TrackPoint Driver For Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21RB, 21RC), L13 Gen 6 2-in-1 (Type 21RD, 21RE) | <= 31.21.49.1 |
| Lenovo | L14 Gen 6 (Type 21S8, 21S9) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD) | <= 31.21.49.1 |
| Lenovo | L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD) | <= 31.21.49.1 |
| Lenovo | E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T0, 21T1), E16 Gen 3 (Type 21ST, 21SU) | < 31.21.60.1 |
| Lenovo | E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 24H2 or later) - ThinkPad E14 Gen 7 (Type 21T0, 21T1), E16 Gen 3 (Type 21ST, 21SU) | < 31.21.60.1 |
| Lenovo | X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad X13 Gen 6 (Type 21RM, 21RN) | < 31.21.60.1 |
| Lenovo | T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14s Gen 6 (Type 21TB, 21TC) | < 31.21.60.1 |
| Lenovo | T14 Gen 6 (Type 21QC, 21QD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 | < 31.21.60.1 |
| Lenovo | T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 | < 31.21.60.1 |
| Lenovo | T14 Gen 6 (Type 21QG, 21QH) Laptops (ThinkPad ) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 | < 31.21.60.1 |
| Lenovo | L16 Gen 2 (Type 21SA, 21SB) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S6, 21S7), L16 Gen 2 (Type 21SA, 21SB) | <= ELA TrackPoint Device 31.21.49.1 / Elan TrackPoint Component 31.21.0.6 / ETD HSA Device 31.21.0.5 |
| Lenovo | L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S6, 21S7), L16 Gen 2 (Type 21SA, 21SB) | <= ELA TrackPoint Device 31.21.49.1 / Elan TrackPoint Component 31.21.0.6 / ETD HSA Device 31.21.0.5 |
| Lenovo | S2 2 in 1 Gen 10 (Type 21RA) China Only Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21R5, 21R6), L13 Gen 6 2-in-1 (Type 21R7, 21R8) | <= 31.21.49.1 |
| Lenovo | S2 Gen 10 Type 21R9 China Only Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21R5, 21R6), L13 Gen 6 2-in-1 (Type 21R7, 21R8) | <= 31.21.49.1 |
| Lenovo | L13 Gen 6 (Type 21R5, 21R6) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21R5, 21R6), L13 Gen 6 2-in-1 (Type 21R7, 21R8) | <= 31.21.49.1 |
Showing 50 of 262 affected configurations. See the CNA advisory for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-14256?
ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.
How severe is CVE-2026-14256?
CVE-2026-14256 has a CVSS score of 4.7/10 (MEDIUM severity). The EPSS model estimates a 0.09% probability of exploitation in the next 30 days.
How do I fix CVE-2026-14256?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-1425A security flaw has been discovered in pymumu SmartDNS up to…6.3
- CVE-2026-14250The Themehunk Login Registration plugin for WordPress is vul…6.3
- CVE-2026-14251A flaw was found in the OpenShift GitOps operator. The Clust…7.7
- CVE-2026-14253Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-14254A race condition in the account lockout mechanism in Delphix…8.3
- CVE-2026-14255A maliciously crafted IFC file, when parsed through certain …5.5
- CVE-2026-14257brace-expansion through 5.0.7 is vulnerable to denial of ser…7.5
- CVE-2026-14258A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router …6.5
- CVE-2026-1426The Advanced AJAX Product Filters plugin for WordPress is vu…8.8
- CVE-2026-14261A vulnerability in the Xerte Online Tools allows for authent…9.1
- CVE-2026-14262The Simple JWT Login – Allows you to use JWT on REST endpoin…8.8
- CVE-2026-14265Deserialization of untrusted data in the RemoteQueryCachePlu…8.8
Are you affected by CVE-2026-14256?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST