CVE-2026-9045

HIGH

Lenovo Accessories And Display Manager For Enterprise < 1.0.9 - Missing Authentication for Critical Function

Title source: rule

Description

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

https://support.lenovo.com/us/en/product_security/LEN-213623

Patch product patch

https://support.lenovo.com/us/en/downloads/ds568567

Scores

CVSS v3 7.8

EPSS 0.0015

EPSS Percentile 4.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-306

Status published

Products (1)

Lenovo/Accessories and Display Manager for Enterprise < 1.0.9

Published Jun 10, 2026

Tracked Since Jun 10, 2026