Design/Logic Flaw

Lenovo System Update formerly ThinkVantage System Update before 5.07.0013 allows local users to submit commands to the System Update service SUService.exe and gain privileges by launching signed Lenovo executables...

CVE-2015-6971

Summary of CVE-2015-6971 : Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows a local attacker to submit commands to the SUService.exe and escalate privileges by launching signed Lenovo executables. The root cause is flaws in the security token authentication proce...

CVE-2015-6971

Lenovo System Update formerly ThinkVantage System Update before 5.07.0013 allows local users to submit commands to the System Update service SUService.exe and gain privileges by launching signed Lenovo executables...

Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - Lenovo Support US

No description provided...

Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - us

Lenovo Security Advisory: LEN-15765 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3756 Summary Description: A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems. An attacker wi...

Windows Uniscribe Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...

Microsoft Windows Hyper-V CVE-2017-0212 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 for x64-based Systems Microsoft Windows 10...

Lenovo Active Protection System Privilege Escalation - Lenovo Support US

No description provided...

Lenovo Active Protection System Privilege Escalation - us

Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...

Intel AMT features to remotely provide the right high-risk vulnerability analysis-vulnerability warning-the black bar safety net

Earlier this week, Intel released a high-risk mention the right vulnerability, the impact of the range including the past 7 years Intel Server chip remote management capabilities. A remote attacker can exploit the vulnerability control there PC's, laptops and servers. This vulnerability number...

Lenovo System Update Local Elevation of Privilege Vulnerability (CNVD-2017-06633)

Lenovo System Update formerly known as ThinkVantage System Update is a suite of automatic system update tools from the Chinese company Lenovo, which includes device driver updates, Windows system patch updates, and more. A privilege extraction vulnerability exists in Lenovo System Update versions...

Lenovo System Update Local Elevation of Privilege Vulnerability

Lenovo System Update formerly known as ThinkVantage System Update is a suite of automatic system update tools from the Chinese company Lenovo, which includes device driver updates, Windows system patch updates, and more. A local elevation of privilege vulnerability exists in Lenovo System Update...

CVE-2015-8110

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

CVE-2015-8109

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...

Privilege escalation

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

Design/Logic Flaw

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...

CVE-2015-8110

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

CVE-2015-8110

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 contains a local privilege escalation in the Tvsukernel.exe GUI. In the context of a temporary administrator account, users can exploit navigation paths like “Click here to learn more” or “View privacy policy” to gain Adm...

CVE-2015-8109

CVE-2015-8109 affects Lenovo System Update (formerly ThinkVantage System Update) prior to version 5.07.0019. The issue is a local privilege-escalation vulnerability where an attacker could gain administrator/SYSTEM privileges by predicting credentials for the temporary administrator account tvsu_...

CVE-2015-8109

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...