CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4089

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges...

CVE-2024-33578

A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges...

CVE-2024-33581

A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges...

CVE-2024-33582

CVE-2024-33582 describes a DLL hijack vulnerability in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. The available connected documents reiterate a local, privilege-escalation scenario but do not provide concrete exploitation details, affected...

CVE-2024-33581

CVE-2024-33581 describes a DLL hijack in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges. The vulnerability is local, with low attack complexity and no user interaction required, and results in high impact to confidentiality, in...

CVE-2024-33580

CVE-2024-33580 describes a DLL hijack vulnerability in Lenovo Personal Cloud that could let a local attacker execute code with elevated privileges. Affected product: Lenovo Personal Cloud. Affected component: DLL loading path exploitation ( DLL hijack ). Root cause: DLL hijack leading to remote/l...

CVE-2024-33578

Technical details for CVE-2024-33578 are not publicly available in the provided documents. Monitor for updates as new information becomes available.

CVE-2024-33578

A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges...

CVE-2024-9046

CVE-2024-9046 concerns Lenovo stARstudio with a DLL hijack that enables a local attacker to execute code with elevated privileges. Affected component: Lenovo stARstudio (DLL loading path likely). Root cause: DLL hijack vulnerability leading to privilege escalation. Impact: local code execution wi...

CVE-2024-4131

A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4130

CVE-2024-4130 corresponds to a DLL hijack vulnerability in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. The connected documents consistently describe a local-privilege-escalation impact via a DLL hijack in Lenovo App Store, but do not furnish concre...

CVE-2024-4089

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4089

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges...

Adobe Framemaker Code Issue Vulnerability (CNVD-2024-40916)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A code issue vulnerability exists in Adobe Framemaker. An attacker could exploit this vulnerability to execute...

Lenovo Personal Cloud Storage 安全漏洞

Lenovo Personal Cloud Storage is a personal cloud storage from the Chinese company Lenovo. A security vulnerability exists in Lenovo Personal Cloud Storage. A local attacker could exploit the vulnerability to elevate privileges and execute code...

Lenovo Lock Screen 安全漏洞

Lenovo Lock Screen is a lock screen application from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Lock Screen. A local attacker could exploit the vulnerability to elevate privileges and execute code...

Lenovo Service Framework 安全漏洞

Lenovo Service Framework is a utility program from the Chinese company Lenovo. A security vulnerability exists in Lenovo Service Framework. A local attacker could exploit the vulnerability to elevate privileges and execute code...

CVE-2024-46088

The Zhejiang University Entersoft Customer Resource Management System versions v2002 through v2024 are affected by an arbitrary file upload vulnerability in the ProductAction.entphone interface. This flaw allows an attacker to upload a crafted file to execute arbitrary code . To remediate this, u...

CVE-2024-47965 Out-of-bounds Read vulnerability in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...