Lenovo System Interface Foundation — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo System Interface Foundation, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2019-6186 — CVSS 8.8 (high): A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated…
• CVE-2019-6189 — CVSS 7.8 (high): A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative…
• CVE-2016-8223 — CVSS 7.8 (high): During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation…
• CVE-2021-3922 — CVSS 7.8 (high): A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version…
• CVE-2021-3969 — CVSS 7.8 (high): A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface…
• CVE-2020-8318 — CVSS 7.3 (high): A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version…
• CVE-2020-8319 — CVSS 7.3 (high): A privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to version 1.1.19.3 that could allow an…
• CVE-2020-8346 — CVSS 5.5 (medium): A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version…
• CVE-2020-8324 — CVSS 5.0 (medium): A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could…