What’s Vulnerable › Vulnerabilities

CVE-2016-8235

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-10 · updated 2026-06-17
• Weakness: CWE-264

Description

Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges.

Affected products

• Lenovo Group Ltd. Customer Care Software Development Kit (CCSDK): through 2.0.16

References

• http://www.securityfocus.com/bid/97543
• https://support.lenovo.com/us/en/solutions/LEN-11340
• http://www.securityfocus.com/bid/97543
• https://support.lenovo.com/us/en/solutions/LEN-11340

Get alerted when CVE-2016-8235 or the next vulnerability affects your stack