CVE-2026-77873

CVSS 7.3 (high) · published 2026-11-11

An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.

Weakness: CWE-276

Source: NVD CVE-2026-77873

References

• https://support.lenovo.com/us/en/downloads/ds012808
• https://support.lenovo.com/us/en/product_security/LEN-232748

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.