Lenovo vulnerabilities
401 CVEs and advisories name Lenovo as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-9046A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclus
- CVE-2026-6511During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows
- CVE-2025-10238During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products c
- CVE-2025-10237During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could al
- CVE-2026-6090A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute ar
- CVE-2026-8637A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authent
- CVE-2026-9045During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise fo
- CVE-2026-7516A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow
- CVE-2026-6282A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote
- CVE-2026-6281A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the loc
- CVE-2026-4145During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticat
- CVE-2026-4135During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allo
- CVE-2026-4134During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allo
- CVE-2026-1636A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authentica
- CVE-2026-0827During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Len
- CVE-2026-2640During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated
- CVE-2026-1717An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could all
- CVE-2026-1716An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a
- CVE-2026-1715An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a
- CVE-2026-1653A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authen
- CVE-2026-1652A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authe
- CVE-2026-0940A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to mod
- CVE-2026-2368An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of interceptin
- CVE-2026-1068An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of interceptin
- CVE-2026-0520A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authentic
- CVE-2025-14058A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical acc
- CVE-2026-0421A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in
- CVE-2025-13455A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device auth
- CVE-2025-13454A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sen
- CVE-2025-13453A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the