CVE-2015-8109

CVE-2015-8109 describes a privilege escalation vulnerability in Lenovo System Update (versions prior to 5.07.0019). A local attacker could exploit this by predicting credentials for a temporary administrator account, requiring knowledge of its creation time. This vulnerability carries a CVSS v3 score of 7.0 (High), indicating a local attack vector with high complexity but high potential impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it did receive some media coverage at the time.