Lenovo system update

This hub aggregates every CVE we track for Lenovo system update, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Lenovo system update.

• CVE-2023-4632An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.7.8Nov 8, 2023
• CVE-2022-4568A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.7.0May 1, 2023
• CVE-2022-0354A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation o...7.3Apr 22, 2022
• CVE-2018-9063MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or pas...7.8May 4, 2018
• CVE-2015-8109Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of tvsu_tmp_xxxxxXXXXX account credentials that requires kno...7.0Apr 24, 2017
• CVE-2015-8110Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn more" or (2) "View privacy policy" within...7.8Apr 24, 2017