VULNERABILITY INTELLIGENCE

CVE-2026-1636

CVSS score6.7 MEDIUM
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-04-15
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated privileges.

Weakness classification

  • psirt@lenovo.com: CWE-427

Primary references