Vulnerabilidades do Lenovo Vantage
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Lenovo Vantage: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:lenovo:vantage
CVE-2026-15994
Alta · 7.0
CWE-59 13/08/2026
Link Following em Lenovo Commercial Vantage
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
CVE-2026-12036
Alta · 7.1
CWE-59 13/08/2026
Link Following em Lenovo Vantage
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
CVE-2026-0827
Alta · 7.1
CWE-59 15/04/2026
Link Following em Lenovo Diagnostics
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
CVE-2026-1717
Média · 5.5
CWE-88 11/03/2026
Argument Injection em Lenovo Vantage
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to terminate arbitrary processes with elevated privileges.
CVE-2026-1716
Alta · 7.1
CWE-88 11/03/2026
Argument Injection em Lenovo Vantage
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.
CVE-2026-1715
Alta · 7.1
CWE-88 11/03/2026
Argument Injection em Lenovo Vantage
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.
CVE-2025-13154
Média · 5.5
CWE-59 14/01/2026
Link Following em Lenovo Vantage
An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.