Cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3alenovosystem_update/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 17:58:41 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgLenovo System Update: Improper Permissions Vulnerability (CVE-2026-77873)https://feed.craftedsignal.io/briefs/2026-11-lenovo-system-update-cve-2026-77873/Wed, 11 Nov 2026 17:58:41 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-lenovo-system-update-cve-2026-77873/Lenovo System Update contains an improper permissions vulnerability that allows a local authenticated user to execute code with elevated privileges.Lenovo System Update is affected by an improper permissions vulnerability, identified as CVE-2026-77873. This vulnerability allows a local, authenticated user to execute code with elevated privileges on the affected system.

Impact

An authenticated local attacker can leverage this vulnerability to execute code with elevated privileges.

Recommendation

  1. Inventory systems running Lenovo System Update.
  2. Monitor vendor security advisories for updates regarding this vulnerability.
]]>highadvisory