CVE-2024-4696: Lenovo Service Bridge

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited.

Affected products

• Lenovo Service Bridge: before 5.0.2.17 (fixed in 5.0.2.17)

Published 2024-06-13. Last modified 2026-06-17.