System Update vulnerabilities
5 known vulnerabilities in System Update from Lenovo. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
System Update: Deserialization of Untrusted Data
A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
- 7.3 High severity
System Update: Incorrect Default Permissions
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
- 7.0 High severity
System Update: Authentication Bypass by Spoofing
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.8 High severity
Lenovo System Update: Uncontrolled Search Path Element
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.
- 7.8 High severity
System Update: Cleartext Storage of Sensitive Information in GUI
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displ