CVE-2024-23594 — Lenovo / Windows 7 and 8 PC Preloads

CVE-2024-23594

Lenovo / Windows 7 and 8 PC Preloads PUBLISHED

Description (CNA)

A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lenovo / Windows 7 and 8 PC Preloads	affected various

CWE

CWE-121

References

https://support.lenovo.com/us/en/product_security/LEN-132277

ADP enrichment

CVE

No English description supplied.

https://support.lenovo.com/us/en/product_security/LEN-132277

CISA-ADP

No English description supplied.

No references supplied.