CVE-2021-3922: Lenovo System Interface Foundation

High severity, CVSS 7.0. EPSS: 1.9% chance of exploitation in the next 30 days.

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe.

Affected products

• Lenovo System Interface Foundation: before 1.1.20.3 (fixed in 1.1.20.3)

Published 2022-05-18. Last modified 2026-06-17.