CVE-2021-3969

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

CVE-2021-3969

TOCTOU vulnerability CVE-2021-3969 affects Lenovo System Interface Foundation’s IMController before version 1.1.20.3, enabling local privilege elevation due to a race condition in Time of Check/Time of Use. Impact is local privilege escalation with partial confidentiality/integrity/availability i...