vulnerability
Microsoft Windows: CVE-2024-23594: Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:M/Au:M/C:C/I:C/A:C) | 04/09/2024 | 04/09/2024 | 08/13/2024 |
Severity
6
CVSS
(AV:L/AC:M/Au:M/C:C/I:C/A:C)
Published
04/09/2024
Added
04/09/2024
Modified
08/13/2024
Description
A buffer overflow vulnerability was reported
in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014
that could allow a privileged attacker with local access to execute arbitrary code.
Solution(s)
microsoft-windows-windows_10-1809-kb5036896microsoft-windows-windows_10-21h2-kb5036892microsoft-windows-windows_10-22h2-kb5036892microsoft-windows-windows_11-21h2-kb5036894microsoft-windows-windows_11-22h2-kb5036893microsoft-windows-windows_11-23h2-kb5036893microsoft-windows-windows_server_2019-1809-kb5036896microsoft-windows-windows_server_2022-21h2-kb5036909microsoft-windows-windows_server_2022-22h2-kb5036909microsoft-windows-windows_server_2022-23h2-kb5036910
References
- CVE-2024-23594
- https://attackerkb.com/topics/CVE-2024-23594
- URL-https://support.microsoft.com/help/5036892
- URL-https://support.microsoft.com/help/5036893
- URL-https://support.microsoft.com/help/5036894
- URL-https://support.microsoft.com/help/5036896
- URL-https://support.microsoft.com/help/5036909
- URL-https://support.microsoft.com/help/5036910
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.