CVE-2026-77873: High severity vulnerability

Published Nov 11, 2026

Updated

An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Lenovo System Update from your environment.
Uninstall Lenovo System Update as soon as possible.
Compensating control
Migrate to Lenovo Commercial Vantage.

Frequently Asked Questions

Who can exploit this issue?

An attacker must already have local authenticated access to the affected system and low-level privileges. The attack also requires user interaction.

What level of access could successful exploitation provide?

Successful exploitation could allow execution of code with elevated privileges. The reported impact includes high confidentiality, integrity, and availability impact.

CVE-2026-77873: High severity vulnerability

Remediation

Frequently Asked Questions

Who can exploit this issue?

What level of access could successful exploitation provide?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What level of access could successful exploitation provide?