Description (CNA)
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Lenovo Group Ltd. / All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID. | affected 1.0.66.0 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.