SU
Product
System Update
16
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 0Low 0
Watch
Add System Update to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4632 | 7.8 | Nov 8 | An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges Affected: before 5.08.02.25 |
| CVE-2022-0354 | 7.8 | Apr 22 | A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during… Affected: before 2022-02-25 |
| CVE-2015-7334 | 7.8 | Mar 27 | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA Affected: through 5.07.0008 |
| CVE-2015-7333 | 7.8 | Mar 27 | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA Affected: through 5.07.0008 |
| CVE-2018-9063 | 7.8 | May 4 | MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very… Affected: before 5.07.0072 |
| CVE-2015-6971 | 7.8 | Oct 3 | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges… Affected: through 5.06.0034 |
| CVE-2015-7336 | 7.5 | Mar 27 | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA Affected: through 5.07.0008 |
| CVE-2019-6175 | 7.5 | Sep 26 | A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations Affected: before 5.07.0088 |
| CVE-2019-6163 | 7.5 | Jun 26 | A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations Affected: before 5.07.0084 |
| CVE-2026-6387 | 7.0 | Aug 13 | A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges Affected: before 5.08.04.85 |
| CVE-2022-4568 | 7.0 | May 1 | A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges Affected: before 5.08.01.0005 |
| CVE-2020-8342 | 7.0 | Sep 15 | A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege Affected: before 5.07.0106 |
| CVE-2015-7335 | 7.0 | Mar 27 | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA Affected: through 5.07.0008 |
| CVE-2015-2234 | – | May 12 | Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permissions for the update files directory, which allows local… Affected: through 5.06.0027 |
| CVE-2015-2233 | – | May 12 | Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle… Affected: through 5.06.0027 |
| CVE-2015-2219 | – | May 12 | Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token… Affected: through 5.06.0027 |
Showing 16