CVE-2024-10253 MEDIUM

CVE-2024-10253

Vendor Lenovo

Product PC Manager

Weakness CWE-122

Published January 14, 2025

Last update January 15, 2025

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.

Key dates

02Disclosure timeline

January 14, 2025 CVE published

January 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-10253 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

Identifiers

CVE CVE-2024-10253

CWE CWE-122

CVSS 4.7 / MEDIUM

Affected versions

Vendor Lenovo

Product PC Manager

Affected < 5.1.90.12092

Vendor Lenovo

Product Browser

Affected < 9.0.5.12181

Vendor Lenovo

Product App Store

Affected < 9.0.20

CVE-2024-10253

01Description

02Disclosure timeline

03References

04Related CVE