lenovo_exec

lenovoexec CVE-2022-3699 mit beliebiger Kernel-Code-Ausführung Original-Exploit: https://github.com/alfarom256/CVE-2022-3699...

CVE-2025-8061-Exploit

Exploit CVE-2025-8061 Panoramica Exploit proof-of-concept per LnvMSRIO.sys driver MSR I/O di Lenovo, che dimostra la lettura/scrittura arbitraria della memoria fisica e l'accesso alla memoria del kernel tramite la traduzione VA-to-PA di Superfetch. Informazioni sul driver Proprietà| Valore ---|--...

lenovo-dispatcher-poc

Lenovo Dispatcher PoC Esta é uma prova de conceito básica para explorar o driver lenovo dispatcher LnvMSRIO.sys CVE-2025-8061. Vulnerabilidades encontradas por Luis Casvella fonte: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. A ideia principal deste poc é explorar apena...

CVE-2026-0827

CVE-2026-0827 تحاول عملية LdeApi.Server.exe كتابة MP27AM7Westimation.json إلى C:\ProgramData\Lenovo\LDE\SYSTEM دون انتحال هوية. هذا الدليل غير موجود افتراضيًا. وبما أن C:\ProgramData\ يسمح للمستخدمين العاديين بإنشاء أدلة فرعية، يمكن لمستخدم منخفض الامتياز إنشاء هذا المسار وتحويله إلى NTFS junctio...

VirtualLockSensorLPE

VirtualLockSensorLPE Descrizione Exploit PoC di escalazione dei privilegi locale per CVE-2025-0886 che colpisce Elliptic Virtual Lock Sensor versione 3.1.60531.2 in esecuzione su Windows, installato per impostazione predefinita su alcuni modelli di laptop Lenovo. Consente l'esecuzione di un paylo...

CVE-2025-68921

CVE-2025-68921 In Nahimic, einer auf vielen Gaming-Laptops vorinstallierten Audioverbesserungssoftware, existiert eine lokale Schwachstelle zur Rechteausweitung. Das Problem ermöglicht es einem Benutzer mit niedrigen Rechten, seine Rechte auf NT AUTHORITY\SYSTEM auszuweiten. Diese Schwachstelle...

CVE-2022-3699

CVE-2022-3699 Il controllo di accesso errato per il driver di diagnostica Lenovo consente a un utente con privilegi ridotti di emettere IOCTL del dispositivo per eseguire letture/scritture arbitrarie di memoria fisica/virtuale. Grazie a ch3rn0byl per l'aiuto e ho preso in prestito al 100% due del...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Nota: Questa documentazione e il codice dell'exploit sono stati generati con assistenza AI Kiro. Verificare prima dell'uso — l'AI può commettere errori, e ne commette. Dispositivo Campo| Valore ---|--- Modello| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU|...

CVE-2025-2502

Scoperto accidentalmente durante lo studio dell'elevazione dei privilegi locali. In qualsiasi versione del Lenovo PC Manager, gli strumenti hanno una vulnerabilità di autorizzazione: qualsiasi strumento scaricato concede all'utente normale il permesso F controllo completo. Poiché gli strumenti di...

CVE-2026-6387

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-63423

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-63424

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...

CVE-2026-63425

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-63426

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges...

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

EUVD-2026-58061

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

CVE-2026-15994

Technical details (affected product, versions, root cause, and exploit scenarios) are not publicly available in the provided documents. Monitor for updates from Lenovo and CVE/NVD records.

CVE-2026-63423

Technical details about CVE-2026-63423 are not publicly available in the provided documents. Monitor for updates from Lenovo and NVD; no affected products, vectors, or mitigations can be confirmed from the supplied sources.

CVE-2026-63423

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...