description: During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges.
problem types: Lenovo System Interface Foundation Privilege Escalation?
affected:
{
product: All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID.
vendor: Lenovo Group Ltd.
versions:
status: affected, version: 1.0.66.0 and earlier
}