Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Lenovo Lock Screen Allows Local Privilege Escalation

CVE-2024-4132 · published 2 years ago
Summary

A security issue in Lenovo Lock Screen software could allow a malicious user on the same computer to run unauthorized code with elevated access. This could potentially lead to data theft or system compromise. To protect your system, update Lenovo Lock Screen to the latest version or consider replacing it with a different lock screen solution.

What to do
  • Update lenovo lock_screen to version 9.0.18 or later.
Affected software
VendorProductAffected versions
lenovo lock_screen < 9.0.18
cpe:2.3:a:lenovo:lock_screen:*:*:*:*:*:*:*:*
Original advisory text
A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges.
A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-427Uncontrolled Search Path Element
Timeline
Published11 Oct 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-4132 · NVD
Track software like this
Free during beta