CVE-2016-8223 During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local...
HighCVSS 7.8
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo system interface foundation | <= 1.0.66.0 | No fix listed |
| Lenovo Group Ltd. All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID. | = 1.0.66.0 and earlier | No fix listed |
References
- 94597 vdb-entry
- support.lenovo.com patch vendor-advisory