CVE-2026-77882: High severity vulnerability
A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Lenovo System Updatefrom your environment.Uninstall Lenovo System Update as soon as possible because it has reached end of support and no further updates will be released.
- Compensating control
Migrate to Lenovo Commercial Vantage.
Event History
Frequently Asked Questions
Who can exploit this issue?
A local authenticated user can exploit it. The provided data does not indicate that remote or unauthenticated attackers can trigger the vulnerability.
What level of impact could successful exploitation have?
Successful exploitation could allow code execution with elevated privileges. The supplied vector rates confidentiality, integrity, and availability impact as high.