Software Fix
Monthly
Local privilege escalation in Lenovo Software Fix versions prior to 7.5.5.19 allows an authenticated local attacker to execute arbitrary code with elevated privileges via argument injection. While the CVSS 4.0 score is 8.5, exploitation requires local authenticated access and no active exploitation or public exploit is known; EPSS probability is extremely low (0.01%).
Local privilege escalation in Lenovo Software Fix versions prior to 7.5.5.19 allows an authenticated user to execute arbitrary code with elevated privileges during installation via an uncontrolled search path (CWE-427). The vulnerability requires local access and user interaction to run the installer. No active exploitation or public exploit code is known at this time.
Arbitrary file write with elevated privileges in Lenovo Software Fix installer allows local authenticated users to overwrite system files during installation. Affected versions before 7.5.5.19. No public exploitation reported, EPSS low (0.01%), and SSVC
Local privilege escalation in Lenovo Software Fix versions prior to 7.5.5.19 allows an authenticated local attacker to execute arbitrary code with elevated privileges via argument injection. While the CVSS 4.0 score is 8.5, exploitation requires local authenticated access and no active exploitation or public exploit is known; EPSS probability is extremely low (0.01%).
Local privilege escalation in Lenovo Software Fix versions prior to 7.5.5.19 allows an authenticated user to execute arbitrary code with elevated privileges during installation via an uncontrolled search path (CWE-427). The vulnerability requires local access and user interaction to run the installer. No active exploitation or public exploit code is known at this time.
Arbitrary file write with elevated privileges in Lenovo Software Fix installer allows local authenticated users to overwrite system files during installation. Affected versions before 7.5.5.19. No public exploitation reported, EPSS low (0.01%), and SSVC