Lenovo vulnerabilities
Published CVEs affecting Lenovo products: 71 record(s), with severity, exploitation and fixes.
Vantage 7App Store 6Pcmanager 4Smart Connect 4IdeaPad Slim 3 16IRH8 BIOS 4Legion Pro 7 16ADR10H BIOS 4Legion 7 16IAX10 BIOS 4ThinkBook 16p G6 IAX BIOS 4Legion 5 15IRX10 BIOS 4Lenovo V15 G6 ARP BIOS 4Legion Pro 5 16IRX10 BIOS 4IdeaPad Slim 3 15AMN8 BIOS 4Yoga Book 9 13IMU9 BIOS 4IdeaPad Slim 3 14ITN9 BIOS 4Yoga 9 2-in-1 14IMH9 BIOS 4IdeaPad Pro 5 16IPH11 BIOS 4LOQ 15ARP10E BIOS 4Idea Tab Pro TB373FU 4Legion Pro 7 16ARX8H BIOS 4Tab K9 TB305FU 4Tab K9 TB305XU 4Lenovo V14 G6 ITN BIOS 4Tab Extreme TB570ZU TB570FU 4Tab M10 5G TB360ZU 4ThinkBook 16p G6 ADR BIOS 4Legion Slim 5 14APH8 BIOS 4Lenovo V15 G2 IJL Laptop BIOS 4IdeaPad Pro 5 16IAH10 BIOS 4Legion Pro 5 16IAX10 BIOS 4Yoga Tab Plus TB520FU 4LOQ 15IAX9E BIOS 4Dock Manager 4IdeaPad Pro 5 16ASP10 BIOS 4Legion Pro 7 16AFR10H BIOS 4Legion Pro 5 16AFR10 BIOS 4Legion 7 16AGP11 BIOS 4IdeaPad Pro 5 16AGP11 BIOS 4Legion 5 15IAX10 BIOS 4Yoga Book 9 14IAH10 BIOS 4Legion Pro 5 16IRX9 BIOS 4
CVE-2026-92777
Medium · 6.4
CWE-1394 Oct 15, 2026
A potential vulnerability was reported in some Lenovo Tablets that could allow a user…
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
CVE-2026-92629
High · 7.3
CWE-862 Oct 15, 2026
Missing Authorization in Lenovo Baiying PC Client
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-89062
Medium · 5.5
CWE-787 Oct 15, 2026
Out-of-bounds Write in Lenovo Energy Management Driver
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.
CVE-2026-89057
Medium · 6.8
CWE-288 Oct 15, 2026
Authentication Bypass Using an Alternate Path or Channel in Lenovo Idea Tab Pro TB373FU
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
CVE-2026-75941
High · 8.0
CWE-502 Oct 15, 2026
Deserialization of Untrusted Data in Lenovo Legion Zone Application
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.
CVE-2026-16755
Medium · 5.3
CWE-1393 Oct 15, 2026
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed…
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.
CVE-2026-16754
Medium · 4.8
CWE-295 Oct 15, 2026
Improper Certificate Validation in Lenovo Smart Camera C33
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
CVE-2026-6387
High · 7.0
CWE-290 Aug 13, 2026
Authentication Bypass by Spoofing in Lenovo System Update
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-63426
High · 7.1
CWE-59 Aug 13, 2026
Link Following in Lenovo Dock Manager
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
CVE-2026-63425
High · 7.8
CWE-276 Aug 13, 2026
Incorrect Default Permissions in Lenovo Dock Manager
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-63424
High · 7.3
CWE-261 Aug 13, 2026
During an internal security assessment, an improperly protected key was discovered in…
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
CVE-2026-63423
High · 7.8
CWE-321 Aug 13, 2026
During an internal security assessment, a potential vulnerability was discovered in…
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-15994
High · 7.0
CWE-59 Aug 13, 2026
Link Following in Lenovo Commercial Vantage
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
CVE-2026-14256
Medium · 4.7
CWE-125 Aug 13, 2026
Out-of-bounds Read in Lenovo E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad
ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.
CVE-2026-12036
High · 7.1
CWE-59 Aug 13, 2026
Link Following in Lenovo Vantage
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
CVE-2026-16793
High · 8.8
CWE-20 Aug 4, 2026
Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.
CVE-2026-16792
Medium · 6.1
CWE-295 Aug 4, 2026
Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.
CVE-2026-16791
Low · 3.9
CWE-377 Aug 4, 2026
Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.
CVE-2026-9046
High · 7.0
CWE-277 Jul 16, 2026
A potential insecure permissions vulnerability was reported in Legion Zone and the…
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.
CVE-2026-6511
Medium · 5.5
CWE-306 Jul 16, 2026
Missing Authentication for Critical Function in Lenovo Smart Connect
During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.
CVE-2026-14371
High · 8.8
CWE-78 Jul 16, 2026
OS Command Injection in Lenovo XClarity Integrator for Microsoft Windows Admin Center
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.
CVE-2026-13104
High · 7.3
CWE-250 Jul 16, 2026
Execution with Unnecessary Privileges in Lenovo App Store
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-13103
High · 7.3
CWE-22 Jul 16, 2026
Path Traversal in Lenovo App Store
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code.
CVE-2026-10590
Medium · 4.4
Jul 16, 2026
A potential missing authentication vulnerability could allow a local privileged attacker…
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
CVE-2026-10589
Medium · 6.0
CWE-787 Jul 16, 2026
Out-of-bounds Write in Lenovo Yoga Pro 7 15IPH11 BIOS
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.