CVE-2026-4145: Lenovo Software Fix

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

Affected products

• Lenovo Software Fix: before 7.5.5.19 (fixed in 7.5.5.19)

Published 2026-04-15. Last modified 2026-08-24.