CVE-2019-6173

CVE-2019-6173 is a DLL search path vulnerability affecting Lenovo installation packages, exploitable during installation when an attacker has administrative privileges. The issue occurs in certain Lenovo packages prior to version 1.2.9.3 and can lead to privilege escalation. Lenovo’s advisory not...

CVE-2019-6196

The CVE-2019-6196 entry is supported by Lenovo’s own advisories and CNVD/NVD references, which identify Lenovo installation packages (prior to version 1.2.9.3) as affected by a symbolic link vulnerability. The issue could allow privileged file operations during extraction/installation, implying l...