CVE-2015-2219

CVE-2015-2219 describes a local privilege escalation vulnerability in Lenovo System Update (formerly ThinkVantage System Update) versions prior to 5.06.0034. This flaw allows a local attacker to gain elevated privileges by sending commands with predictable security tokens to the SUService.exe service via a named pipe. The vulnerability has a CVSS score of 7.2, indicating high severity due to its low attack complexity and complete impact on confidentiality, integrity, and availability. While not listed on the KEV catalog, a Metasploit module and an ExploitDB entry confirm the availability of exploit code, though there is no evidence of active exploitation or significant community discussion.