Lenovo System Update vulnerabilities

2 CVEs affecting Lenovo System Update, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8110, published 2017-04-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8110, published 2017-04-24. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn more" or (2) "View privacy policy" within…
CVE-2015-8109, published 2017-04-24. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of tvsu_tmp_xxxxxXXXXX account credentials that requires…