alps vulnerabilities

Products

• Alps HID Monitor Service 1
• device Controller 1
• pointing-device driver 1

Latest alps CVEs

Newest publication first

1. CVE-2019-25292 Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path

   Published 2026-02-06

   High·CVSS 8.5 EPSS 0.17%

   Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\Apoint2K\HidMonitorSvc.exe to inject malicious...

2. CVE-2019-25285 Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path

   Published 2026-02-04

   High·CVSS 8.5 EPSS 0.18%

   Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level acc...

3. CVE-2018-10828 An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data wri...

   Published 2018-05-09

   Medium·CVSS 5.5 EPSS 1.3% PoC

   An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.