Lenovo App Store Hijack Vulnerability Allows Local Attacker Execution with Elevated Privileges

CVE-2024-4130

What is CVE-2024-4130?

A DLL hijack vulnerability has been identified in Lenovo App Store, potentially enabling local attackers to execute arbitrary code with elevated privileges. This issue poses significant risks to systems where the affected application is installed, allowing unauthorized access and manipulation of system resources. Ensuring the application is updated and following security best practices is essential to mitigate potential exploitation of this vulnerability.

References