lenovo

Latest CVEs · RSS

• CVE-2026-92777 2026-10-15 · CVSS 5.4
  A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections an
• CVE-2026-92629 2026-10-15 · CVSS 7.0
  A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a loc
• CVE-2026-89062 2026-10-15 · CVSS 6.8
  A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue sc
• CVE-2026-89057 2026-10-15 · CVSS 7.0
  A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device acc
• CVE-2026-75941 2026-10-15 · CVSS 8.6
  A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the
• CVE-2026-16755 2026-10-15 · CVSS 6.0
  A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user t
• CVE-2026-16754 2026-10-15 · CVSS 5.9
  A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could all
• CVE-2026-93832 2026-10-01 · CVSS 4.8
  A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps.
• CVE-2026-11813 2026-09-10 · CVSS 8.5
  A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privi
• CVE-2026-18994 2026-09-10 · CVSS 8.4
  A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, tha
• CVE-2026-19136 2026-09-10 · CVSS 8.4
  A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow
• CVE-2026-63427 2026-09-10 · CVSS 8.5
  An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution wit
• CVE-2026-75940 2026-09-10 · CVSS 9.3
  A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensiti
• CVE-2026-18058 2026-09-02 · CVSS 7.3
  The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escal
• CVE-2026-14256 2026-08-13 · CVSS 5.7
  ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated u
• CVE-2026-15994 2026-08-13 · CVSS 7.3
  During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow
• CVE-2026-63423 2026-08-13 · CVSS 8.5
  During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could
• CVE-2026-63424 2026-08-13 · CVSS 7.0
  During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalat
• CVE-2026-63425 2026-08-13 · CVSS 8.5
  During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authentica
• CVE-2026-63426 2026-08-13 · CVSS 6.9
  During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform
• CVE-2026-12036 2026-08-13 · CVSS 6.9
  An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenti
• CVE-2026-6387 2026-08-13 · CVSS 7.3
  A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with
• CVE-2026-16793 2026-08-04 · CVSS 8.8
  An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that
• CVE-2026-16792 2026-08-04 · CVSS 6.1
  An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent n
• CVE-2026-16791 2026-08-04 · CVSS 3.9
  A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to