CVE-2023-4632

7.8 highEPSS 0.3%

High (7.8) in lenovo system update. EPSS 0.3% chance of exploitation in the next 30 days.

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2023-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lenovo:system_update

References

https://support.lenovo.com/us/en/product_security/LEN-135367
https://support.lenovo.com/us/en/product_security/LEN-135367

Check your stack JSON