CVE-2019-6186

Lenovo System Interface Foundation vulnerability CVE-2019-6186 affects versions prior to 1.1.18.3. An authenticated user could execute code as another user. Lenovo advisory LEN-29198 recommends updating to version 1.1.18.3 or higher as the remediation. Other connected records also mention CVE-201...

CVE-2019-6189

CVE-2019-6189 affects Lenovo System Interface Foundation prior to v1.1.18.3, where an administrative user could load an unsigned DLL due to the unsigned-DLL loading vulnerability. This is documented in Lenovo advisories (LEN-29198) and CVE records. Impact is local with authenticated/admin access ...

CVE-2020-8318

The CVE-2020-8318 entry describes a privilege-escalation vulnerability in Lenovo System Interface Foundation, specifically in the LenovoSystemUpdatePlugin, which could allow an authenticated user to execute code with elevated privileges. Affected stack includes Lenovo System Interface Foundation ...

CVE-2021-3922

CVE-2021-3922 affects Lenovo System Interface Foundation’s IMController, where a race condition in the IMController process enables a local attacker to interact with the IMController child process via its named pipe. The vulnerability is associated with versions prior to 1.1.20.3. Impact is descr...

CVE-2020-8319

CVE-2020-8319 affects Lenovo System Interface Foundation prior to version 1.1.19.3, enabling privilege escalation for an authenticated user. The root cause involves vulnerable Lenovo Vantage/System Interface Foundation plugins communicating via the System Interface Foundation Service, where untru...

CVE-2020-8324

CVE-2020-8324 affects Lenovo System Interface Foundation’s LenovoAppScenarioPluginSystem. A plugin contract runs under SYSTEM with signed package manifests, but an unchecked package name path (used to locate plugin updates) and inadequate DLL signature checks allowed unprivileged users to manipul...

CVE-2021-3969

TOCTOU vulnerability CVE-2021-3969 affects Lenovo System Interface Foundation’s IMController before version 1.1.20.3, enabling local privilege elevation due to a race condition in Time of Check/Time of Use. Impact is local privilege escalation with partial confidentiality/integrity/availability i...

CVE-2016-8223

CVE-2016-8223 — Lenovo System Interface Foundation Privilege Escalation : A local privilege escalation exists in Lenovo System Interface Foundation on some Windows 10 PCs, where a user with local privileges can run arbitrary code with administrator privileges. The issue involves Lenovo System Int...

CVE-2020-8346

The CVE-2020-8346 issue affects the Lenovo System Interface Foundation used by Lenovo Vantage, with vulnerable versions prior to 1.1.19.5. Root cause: configuration files could be written to non-standard locations, enabling a denial-of-service condition. The LENOVO security advisory PS500345 conf...