CVE-2026-0827

Katalog CVE

CVSS 7.1 · High EPSS 0,21%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada lenovo diagnostics, lenovo hardware scan. Skor CVSS 3.1 7.1 (High) menurut lenovo.com.

Deskripsi (NVD)

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Rincian

Terbit di NVD

15 April 2026

Terakhir diubah

24 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber lenovo.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.lenovo.com/us/en/product_security/LEN-210693 advisory vendor