All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID. vulnerabilities

Product

All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID.

by Lenovo Group Ltd. · last CVE Nov 29, 2016

CVEs

On KEV

7.8

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 1Medium 0Low 0

Severity

All severities1 Critical0 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID. to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-8223	7.8	0%	Nov 29	During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs… Affected: 1.0.66.0 and earlier