Lenovo vulnerabilities
401 CVEs and advisories name Lenovo as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-92777A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass d
- CVE-2026-92629A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, th
- CVE-2026-89062A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated use
- CVE-2026-89057A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain una
- CVE-2026-75941A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allo
- CVE-2026-16755A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauth
- CVE-2026-16754A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese ma
- CVE-2026-11813A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated us
- CVE-2026-18994A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the
- CVE-2026-19136A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese marke
- CVE-2026-63427An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrar
- CVE-2026-75940A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attack
- CVE-2026-14256ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a l
- CVE-2026-15994During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vant
- CVE-2026-63423During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise fo
- CVE-2026-63424During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authentic
- CVE-2026-63425During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allo
- CVE-2026-63426During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated lo
- CVE-2026-12036An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could al
- CVE-2026-6387A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute
- CVE-2026-16793Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
- CVE-2026-16792Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
- CVE-2026-16791Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI
- CVE-2026-10590A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System
- CVE-2026-10589A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.
- CVE-2026-10588A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
- CVE-2026-10587A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Manageme
- CVE-2026-14371The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershel
- CVE-2026-13104A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenti
- CVE-2026-13103A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a