CPE
Lenovo System Update contains an improper permissions vulnerability that allows a local authenticated user to execute code with elevated privileges.