CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

Race condition

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

CVE-2020-8342

CVE-2020-8342 impacts Lenovo System Update prior to version 5.07.0106, describing a race condition that could allow privilege escalation. Lenovo’s Lenovo PS500347 advisory and CNVD/NVD entries align on the same vulnerability and provide a remediation: upgrade to 5.07.0106 or newer. Other connecte...

PT-2020-20109

Name of the Vulnerable Software and Affected Versions Lenovo System Update versions prior to 5.07.0106 Description A race condition issue was reported that could allow escalation of privilege. Recommendations For versions prior to 5.07.0106, update to version 5.07.0106 or later to resolve the iss...

CVE-2020-8342: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

CVE-2020-1033

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

Lenovo System Update Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-42150 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8342 Summary Description: A race condition vulnerability was reported in Lenovo System Update that could allow escalation of privilege. Mitigation...

Important: kernel

Issue Overview: An issue has been reported in the Linux kernel's handling of raw sockets. This issue can be used locally to cause denial of service or local privilege escalation from unprivileged processes or from containers with the CAPNETRAW capability enabled. See Also:...

Dell Inspiron 7347 BIOS Boot Service Override Vulnerability

Dell Inspiron 7347 BIOS is a system update driver for Dell Dell. Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS boot service override vulnerability that allows an attacker to override the EFIBOOTservice structure to execute arbitrary code in System Management Mode SMM...

Privilege escalation

A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8318

A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges...

[SECURITY] [DLA 2172-1] thunderbird security update

Package : thunderbird Version : 1:68.7.0-1deb8u1 CVE ID : CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code. For Debian 8 "Jessie",...

Improvements for the System Update Readiness Tool in Windows 7 and Windows Server 2008 R2

Improvements for the System Update Readiness Tool in Windows 7 and Windows Server 2008 R2 About the System Update Readiness Tool The System Update Readiness Tool can help fix problems that might prevent Windows updates and service packs from installing. For more information and how to download th...

[SECURITY] [DLA 2170-1] firefox-esr security update

Package : firefox-esr Version : 68.7.0esr-1deb8u1 CVE ID : CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie",...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-CNA This implementation is based on the POC pro...

CVE-2015-7333

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INFBYCOMPATIBLEID command type...

CVE-2015-7334

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to...