System Update (Lenovo) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2026-08-13. Vendor: Lenovo.
CVEs of System Update
- CVE-2026-6387 - CVSS 7.3 (high), 2026-08-13: A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code…
- CVE-2023-4632 - CVSS 7.8 (high), 2023-11-08: An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated…
- CVE-2022-4568 - CVSS 7.8 (high), 2023-05-01: A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
- CVE-2022-0354 - CVSS 7.8 (high), 2022-04-22: A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated…
- CVE-2020-8342 - CVSS 7.3 (high), 2020-09-15: A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege.
- CVE-2015-7333 - CVSS 7.8 (high), 2020-03-27: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and…
- CVE-2015-7336 - CVSS 7.5 (high), 2020-03-27: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in…
- CVE-2015-7335 - CVSS 7 (high), 2020-03-27: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported (fixed and publicly disclosed in 2015) in…
- CVE-2015-7334 - CVSS 7.8 (high), 2020-03-27: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and…
- CVE-2019-6175 - CVSS 7.5 (high), 2019-09-26: A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to…
- CVE-2019-6163 - CVSS 7.5 (high), 2019-06-26: A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to…
- CVE-2018-9063 - CVSS 7.8 (high), 2018-05-04: MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an…
- CVE-2015-6971 - CVSS 7.8 (high), 2017-10-03: Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe)…
- CVE-2015-2234 - CVSS 6.9 (medium), 2015-05-12: Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permissions for the update files directory,…
- CVE-2015-2233 - CVSS 8.3 (high), 2015-05-12: Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows…
- CVE-2015-2219 - CVSS 7.2 (high), 2015-05-12: Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by…
