high
advisory
Lenovo System Update: Improper Permissions Vulnerability (CVE-2026-77873)
Lenovo System Update contains an improper permissions vulnerability that allows a local authenticated user to execute code with elevated privileges.
CVE search metadata
CVE search record: CVE-2026-77873. Severity: high. CVSS: 7.3. KEV: no. Product: System Update. Brief: Lenovo System Update: Improper Permissions Vulnerability (CVE-2026-77873). Brief link: https://feed.craftedsignal.io/briefs/2026-11-lenovo-system-update-cve-2026-77873/
Triage facts
Revision 1- Applicability
- System Update
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 17:58 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Lenovo System Update is affected by an improper permissions vulnerability, identified as CVE-2026-77873. This vulnerability allows a local, authenticated user to execute code with elevated privileges on the affected system.
Impact
An authenticated local attacker can leverage this vulnerability to execute code with elevated privileges.
Recommendation
- Inventory systems running Lenovo System Update.
- Monitor vendor security advisories for updates regarding this vulnerability.