vulnerability
Microsoft Windows: CVE-2024-23594: Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:M/Au:M/C:C/I:C/A:C) | Apr 9, 2024 | Apr 9, 2024 | Sep 5, 2025 |
Severity
6
CVSS
(AV:L/AC:M/Au:M/C:C/I:C/A:C)
Published
Apr 9, 2024
Added
Apr 9, 2024
Modified
Sep 5, 2025
Description
A buffer overflow vulnerability was reported
in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014
that could allow a privileged attacker with local access to execute arbitrary code.
Solutions
microsoft-windows-windows_10-1809-kb5036896microsoft-windows-windows_10-21h2-kb5036892microsoft-windows-windows_10-22h2-kb5036892microsoft-windows-windows_11-21h2-kb5036894microsoft-windows-windows_11-22h2-kb5036893microsoft-windows-windows_11-23h2-kb5036893microsoft-windows-windows_server_2019-1809-kb5036896microsoft-windows-windows_server_2022-21h2-kb5036909microsoft-windows-windows_server_2022-22h2-kb5036909microsoft-windows-windows_server_2022-23h2-kb5036910
References
- CVE-2024-23594
- https://attackerkb.com/topics/CVE-2024-23594
- CWE-121
- URL-https://support.microsoft.com/help/5036892
- URL-https://support.microsoft.com/help/5036893
- URL-https://support.microsoft.com/help/5036894
- URL-https://support.microsoft.com/help/5036896
- URL-https://support.microsoft.com/help/5036909
- URL-https://support.microsoft.com/help/5036910
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.