Search/CVE-2019-10724
● CVE — Medium

CVE-2019-10724

VendorlenovoProductlegion y520t z370 firmware, 100e 2nd gen firmware, 300e 2nd gen firmware, 330-14ikbr firmware, 330-15ikbr firmware, 330-15ikbr touch firmware, 330-17ikbr firmware, 720s touch-15ikb firmware, aio310-20iap firmware, aio510-22ish firmware, aio510-23ish firmware, aio520-22ikl firmware, aio520-22iku firmware, aio520-24ikl firmware, aio520-24iku firmware, aio520-27ikl firmware, aio720-24ikb firmware, ideacentre 520s-23iku firmware, thinkcentre m700z firmware, thinkcentre m800z firmware, thinkcentre m810z firmware, thinkcentre m818z firmware, thinkcentre m900z firmware, thinkcentre m910z firmware, v410z(yt s4250) firmwareDiscoveredAug 29, 2019UpdatedNov 21, 2024

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, ThinkCentre M700z 6.0.1.8642, ThinkCentre M800z 6.0.1.8642, ThinkCentre M810z 6.0.1.8642, ThinkCentre M818z 6.0.1.8642, ThinkCentre M900Z 6.0.1.8642, ThinkCentre M910z 6.0.1.8642, V410z(YT S4250) 6.0.1.8642, 330-14IKBR Win10:6.0.1.8652, 330-15IKBR Win10:6.0.1.8652, 330-15IKBR (Brazil)…

CVSS v3.1
6.5 MEDIUM
EPSS
1.22%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage