CVE-2024-10253
Medium
Description
A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.
SeverityMedium
CVSS4.7
Exploit probability—
ProductBrowser
PublishedJan 14, 2025
First seenJan 14, 2025
Weakness typeCWE-122CWE-122
How to fix
Update
- Lenovo Browser9.0.5.12181 or later
- Lenovo PC Manager5.1.90.12092 or later
- Lenovo App Store9.0.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Browser | v < 9.0.5.12181 | 9.0.5.12181 |
| Lenovo PC Manager | v < 5.1.90.12092 | 5.1.90.12092 |
| Lenovo App Store | v < 9.0.20 | 9.0.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.