CVEvulnerability
CVE-2015-8110
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn more" or (2) "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local privilege escalation vulnerability."
Affected configurations
• lenovo lenovo system update (<= 5.07.0013)
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/98037 Third Party Advisory, VDB Entry
- https://ioactive.com/pdfs/IOActive_Advisory_Lenovo_TVSUkernel-Escalation-Privileges.pdf Exploit, Third Party Advisory
- https://support.lenovo.com/us/en/product_security/lsu_privilege Vendor Advisory
- http://www.securityfocus.com/bid/98037 Third Party Advisory, VDB Entry
- https://ioactive.com/pdfs/IOActive_Advisory_Lenovo_TVSUkernel-Escalation-Privileges.pdf Exploit, Third Party Advisory
- https://support.lenovo.com/us/en/product_security/lsu_privilege Vendor Advisory