CVE-2024-33581
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 11, 2024
Updated: Oct 15, 2024
CWE ID 427
Summary
CVE-2024-33581 is a newly disclosed DLL hijack vulnerability affecting Lenovo PC Manager AI. This issue resides within the intelligent scenario feature and can be exploited by a local attacker to execute malicious code with elevated privileges. The vulnerability arises due to Lenovo PC Manager AI's failure to properly secure DLL loading. Successful exploitation can result in significant system compromise, emphasizing the importance of applying the forthcoming patch promptly to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.