High severity7.8NVD Advisory· Published Nov 8, 2023· Updated Jun 17, 2026
CVE-2023-4632
CVE-2023-4632
Description
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.
Affected products
3cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:*range: <5.08.02.25
- (no CPE)
- (no CPE)range: Versions prior to 5.08.02.25
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/product_security/LEN-135367nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.