CVE-2024-4763

Published: Aug 16, 2024Modified: Aug 19, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@lenovo.com (Secondary)

Description

An insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM) that could allow a local attacker to escalate privileges to kernel.

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (1)

https://support.lenovo.com/us/en/product_security/LEN-155486

Source: psirt@lenovo.com

Timeline

No history available yet.