Lenovo Software Fix vulnerabilities

4 CVEs affecting Lenovo Software Fix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-63427, published 2026-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-4145, published 2026-04-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated…
CVE-2026-63427, published 2026-09-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
CVE-2026-4134, published 2026-04-15. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated…
CVE-2026-4135, published 2026-04-15. Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file…