Patch & vulnerability status
Lenovo
Lenovo System Update 5.08.04.85
Latest tracked version 5.08.04.85. Release status, tracked CVEs, and automated cross-platform patching for Lenovo System Update.
Category: System Administration
| Platform | Latest version | CVEs tracked | Last checked |
|---|---|---|---|
| Windows | 5.08.04.85 | 17 | 2026-08-10 |
Known vulnerabilities (CVEs) in Lenovo System Update
Lavawall tracks 17 published CVEs affecting Lenovo System Update, and deploys the versions that fix them automatically across your fleet.
| CVE | Published | Severity | Details | Vector |
|---|---|---|---|---|
| CVE-2023-4632 | 2023-11-08 22:15:11 | HIGH (8) | An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges. | LOCAL |
| CVE-2022-4568 | 2023-05-01 15:15:09 | HIGH (8) | A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges. | LOCAL |
| CVE-2022-0354 | 2022-04-22 21:15:10 | HIGH (8) | A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window. | LOCAL |
| CVE-2020-8342 | 2020-09-15 15:15:14 | HIGH (7) | A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege. | LOCAL |
| CVE-2019-6175 | 2019-09-26 16:15:12 | HIGH (8) | A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations. | NETWORK |
| CVE-2019-6163 | 2019-06-26 14:15:10 | MEDIUM (5) | A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. | NETWORK |
| CVE-2018-9063 | 2018-05-04 17:29:01 | MEDIUM (5) | MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv. | LOCAL |
| CVE-2015-8110 | 2017-04-24 06:59:01 | HIGH (7) | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn more" or (2) "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local privilege escalation vulnerability." | LOCAL |
| CVE-2015-8109 | 2017-04-24 06:59:01 | MEDIUM (7) | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of tvsu_tmp_xxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability." | LOCAL |
| CVE-2015-7336 | 2020-03-27 15:15:12 | HIGH (8) | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed. | NETWORK |
| CVE-2015-7335 | 2020-03-27 15:15:12 | HIGH (7) | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow a user to execute arbitrary code with elevated privileges. | LOCAL |
| CVE-2015-7334 | 2020-03-27 15:15:12 | HIGH (8) | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to execute arbitrary code with elevated privileges. | LOCAL |
| CVE-2015-7333 | 2020-03-27 15:15:12 | HIGH (8) | MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INF_BY_COMPATIBLE_ID command types could allow a user to execute arbitrary code with elevated privileges. | LOCAL |
| CVE-2015-6971 | 2017-10-03 01:29:01 | HIGH (7) | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables. | LOCAL |
| CVE-2015-2234 | 2015-05-12 19:59:15 | MEDIUM (7) | Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permissions for the update files directory, which allows local users to gain privileges by writing to an update file after the signature is validated. | LOCAL |
| CVE-2015-2233 | 2015-05-12 19:59:14 | HIGH (8) | Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate. | ADJACENT_NETWORK |
| CVE-2015-2219 | 2015-05-12 19:59:11 | HIGH (7) | Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe. | LOCAL |
Why keeping Lenovo System Update patched matters
Unpatched third-party applications are one of the most common ways attackers get in: 57% of breached MSP clients and 32% of ransomware cases trace back to a missing patch. Every Lenovo System Update release that fixes a security bug is public, so attackers see it too, and an out-of-date install becomes a documented way in. Tracking the installed version on every machine and closing the gap quickly is what turns a disclosed CVE into a non-event.
How Lavawall® patches Lenovo System Update
Lavawall® watches Lenovo System Update releases and CVEs continuously, ranks each update by risk, and deploys it across your whole fleet, Windows, macOS, and Linux, from a single agent, independently of your RMM. You get one place to see which machines are behind on Lenovo System Update, one policy to bring them current, and timestamped evidence for audits.
Frequently asked questions
What is the latest version of Lenovo System Update?
Lavawall tracks Lenovo System Update at version 5.08.04.85 (last checked 2026-08-10). New releases are monitored continuously and can be deployed automatically across your fleet.
Lavawall tracks Lenovo System Update at version 5.08.04.85 (last checked 2026-08-10). New releases are monitored continuously and can be deployed automatically across your fleet.
Does Lenovo System Update have known security vulnerabilities (CVEs)?
Lavawall tracks 17 CVEs for Lenovo System Update and remediates them automatically as part of patching.
Lavawall tracks 17 CVEs for Lenovo System Update and remediates them automatically as part of patching.
How do I patch Lenovo System Update automatically?
Deploy the Lavawall® agent and Lenovo System Update updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Deploy the Lavawall® agent and Lenovo System Update updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Lavawall® monitors releases and CVEs for Lenovo System Update through public information and proprietary statistical analysis, and can patch it automatically across your fleet.