CVE-2026-4135

MediumCVSS 6.6

Published: 15/04/2026(UTC)Updated: 24/08/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

A potential vulnerability in Lenovo Software Fix that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Risk Assessment

An attacker could overwrite critical system files, potentially leading to privilege escalation or system instability.

Recommendation

Update Lenovo Software Fix to the latest version and only run installations from trusted sources.

Other vulnerabilities in Lenovo Software Fix

CVE-2026-63427High
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

Original NVD description (English source)

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS