An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
Search vulnerabilities
CVE-2026-63427
CVSS 4.0 · 8.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-4135
Local Authenticated File Write Vulnerability in Lenovo Software Fix
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
CVSS 4.0 · 5.2 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-4134
Local Privilege Escalation During Lenovo Software Fix Installation
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges.
CVSS 4.0 · 7 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2026-4145
Local Privilege Escalation in Lenovo Software Fix
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
CVSS 4.0 · 8.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.