A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.
Affected Platforms
Lenovo System Update PluginLenovo Hardware Scan AddinLenovo Hardware Scan Plugin