EUVD-2015-6903

Malware in sbrugna...

CVE-2015-7333

CVE-2015-7333 is a local privilege escalation in Lenovo System Update (ThinkVantage System Update) prior to or including version 5.07.0008. The SUService.exe process handles system updates and accepts commands (type INF and INF_BY_COMPATIBLE_ID) that could be exploited to execute arbitrary code w...

Design/Logic Flaw

Lenovo System Update formerly ThinkVantage System Update before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service SUService.exe through an unspecified named pipe...