CVE-2020-8338 HIGH

CVE-2020-8338

Vendor Lenovo

Product Diagnostics

Weakness CWE-426

Published October 14, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.

Key dates

02Disclosure timeline

October 14, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8338 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/426.html

Related vulnerabilities

04Related CVE

CVE-2026-25880 Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows) CVE-2025-15321 Tanium addressed an improper input validation vulnerability in Tanium Appliance. CVE-2026-53819 OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override CVE-2023-36898 Tablet Windows User Interface Application Core Remote Code Execution Vulnerability CVE-2024-25103 Dynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software