CVE-2021-3969: Lenovo System Interface Foundation

High severity, CVSS 7.0. EPSS: 1.9% chance of exploitation in the next 30 days.

A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges.

Affected products

• Lenovo System Interface Foundation: before 1.1.20.3 (fixed in 1.1.20.3)

Published 2022-05-18. Last modified 2026-06-17.