cvedb.io
CVE-2022-0354
HIGH · CVSS 7.3
EPSS exploitation probability: 0%
Published 2022-04-22T21:15:10.187 · Last modified 2026-06-17T04:20:26.943

Summary

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.

Affected products

lenovo — system_update

Does this affect you?

Add your gear to cvedb and we'll alert you only when lenovo ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.