← All advisories

Medium severity6.7NVD Advisory· Published Apr 15, 2024· Updated Jun 17, 2026

CVE-2024-23593

CVE-2024-23593

Description

A vulnerability was reported

in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014

that could allow a privileged attacker with local access to modify the boot manager and escalate privileges.

Affected products

2

Lenovo/Windows 7 and 8 operating systemsllm-create
Range: 2012-2014
Lenovo/system recovery bootloaderllm-fuzzy
Range: 2012-2014

Patches

Vulnerability mechanics

References

1

support.lenovo.com/us/en/product_security/LEN-132277nvd

News mentions

0

No linked articles in our index yet.