Vulnerabilities > Lenovo > System Update > 5.07.0088

DATE CVE VULNERABILITY TITLE RISK
2023-11-08 CVE-2023-4632 Uncontrolled Search Path Element vulnerability in Lenovo System Update
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2023-05-01 CVE-2022-4568 Incorrect Default Permissions vulnerability in Lenovo System Update
A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
local
low complexity
lenovo CWE-276
7.8
2022-04-22 CVE-2022-0354 Unspecified vulnerability in Lenovo System Update
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.
local
low complexity
lenovo
7.8
2020-09-15 CVE-2020-8342 Race Condition vulnerability in Lenovo System Update
A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege.
local
lenovo CWE-362
6.9