Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:lenovo_system_update:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductLenovo System Update (f0239da9-532b-5575-bc55-3c6fa9c7371c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4632 vulnerable 2026-06-08 06:16:14.031594 Details available
HIGH (7.8)
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.
Published: 2023-11-08T21:58:16.371Z
Updated: 2024-09-03T20:11:48.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4568 vulnerable 2026-06-08 05:51:59.772342 Details available
HIGH (7)
A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
Published: 2023-05-01T14:36:25.547Z
Updated: 2025-01-30T15:24:07.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8110 vulnerable 2026-06-08 05:07:03.201955 Details available
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn more" or (2) "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local privilege escalation vulnerability."
Published: 2017-04-24T06:12:00.000Z
Updated: 2024-08-06T08:13:30.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8109 vulnerable 2026-06-08 05:07:03.201539 Details available
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of tvsu_tmp_xxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."
Published: 2017-04-24T06:12:00.000Z
Updated: 2024-08-06T08:13:31.042Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.