CVE-2022-0354: Lenovo System Update

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.

Affected products

• Lenovo System Update: before 2022-02-25 (fixed in 2022-02-25)

Published 2022-04-22. Last modified 2026-06-17.