CVE-2018-9063

7.8 highEPSS 0.4%

High (7.8) in lenovo system update. EPSS 0.4% chance of exploitation in the next 30 days.

MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lenovo:system_update

References

http://www.securityfocus.com/bid/104125
https://support.lenovo.com/us/en/solutions/LEN-19625
http://www.securityfocus.com/bid/104125
https://support.lenovo.com/us/en/solutions/LEN-19625

Check your stack JSON