pre-installed Lenovo software vulnerability