Vulnerabilities > Lenovo > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-11 CVE-2024-4089 Uncontrolled Search Path Element vulnerability in Lenovo Superfile
A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2024-10-11 CVE-2024-4130 Uncontrolled Search Path Element vulnerability in Lenovo APP Store
A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2024-10-11 CVE-2024-4131 Uncontrolled Search Path Element vulnerability in Lenovo Emulator
A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2024-10-11 CVE-2024-4132 Uncontrolled Search Path Element vulnerability in Lenovo Lock Screen
A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2024-10-11 CVE-2024-9046 Uncontrolled Search Path Element vulnerability in Lenovo Starstudio
A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2024-07-31 CVE-2019-6197 Improper Authentication vulnerability in Lenovo Pcmanager 2.6.40.3154
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
local
low complexity
lenovo CWE-287
7.8
2024-07-31 CVE-2019-6198 Improper Authentication vulnerability in Lenovo Pcmanager 2.6.40.3154
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
local
low complexity
lenovo CWE-287
7.8
2024-07-31 CVE-2023-1577 Unspecified vulnerability in Lenovo Drivers Management 2.7.1128.1046
A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges.
local
low complexity
lenovo
7.8
2024-01-19 CVE-2023-5080 Unspecified vulnerability in Lenovo products
A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands.
local
low complexity
lenovo
7.8
2024-01-19 CVE-2023-6043 Improper Certificate Validation vulnerability in Lenovo Vantage
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.
local
low complexity
lenovo CWE-295
7.8