Description
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool
Default version status: unaffected
versions prior to v1.0.35_v2affected