Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductSystem Update (e5e26e8b-eddb-5f32-8a5f-11a681dab5ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4632 vulnerable 2026-06-08 06:16:14.032779 Details available
HIGH (7.8)
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.
Published: 2023-11-08T21:58:16.371Z
Updated: 2024-09-03T20:11:48.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4568 vulnerable 2026-06-08 05:51:59.773475 Details available
HIGH (7)
A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
Published: 2023-05-01T14:36:25.547Z
Updated: 2025-01-30T15:24:07.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0354 vulnerable 2026-06-08 05:39:09.874136 Details available
HIGH (7.3)
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.
Published: 2022-04-22T20:30:47.000Z
Updated: 2026-06-02T13:50:02.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8342 vulnerable 2026-06-08 05:27:16.432211 Details available
HIGH (7.3)
A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege.
Published: 2020-09-15T14:20:18.072Z
Updated: 2024-09-17T00:01:40.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6175 vulnerable 2026-06-08 05:14:09.919340 System Update Vulnerability
A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations.
Published: 2019-09-26T15:22:15.000Z
Updated: 2024-08-04T20:16:23.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6163 vulnerable 2026-06-08 05:14:09.182768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9063 vulnerable 2026-06-08 05:12:07.534607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7336 vulnerable 2026-06-08 05:07:00.444365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7335 vulnerable 2026-06-08 05:07:00.444090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7334 vulnerable 2026-06-08 05:07:00.443812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7333 vulnerable 2026-06-08 05:07:00.443514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6971 vulnerable 2026-06-08 05:06:59.954651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2234 vulnerable 2026-06-08 05:06:27.731662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2233 vulnerable 2026-06-08 05:06:27.731357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2219 vulnerable 2026-06-08 05:06:27.725411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.