{"id":"CVE-2025-10495","aliases":["EUVD-2025-131938","GHSA-v6gr-9fpj-mghv"],"status":"published","title":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser...","description":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.","severity":{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00225,"percentile":0.13293,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295"],"published":"2025-11-12T19:18:44Z","modified":"2026-10-18T20:10:00Z","products":[{"vendor":"lenovo","product":"app store"},{"vendor":"lenovo","product":"browser"},{"vendor":"lenovo","product":"legion zone"},{"vendor":"lenovo","product":"pc manager"}],"references":[{"url":"https://iknow.lenovo.com.cn/detail/434328"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10495"},{"url":"https://github.com/advisories/GHSA-v6gr-9fpj-mghv"}],"sources":{"cve":[{"id":"CVE-2025-10495","description":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.","status":"published","published":"2025-11-12T19:18:44.859Z","modified":"2026-02-26T16:57:09.944Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:32:30.643267Z"}],"euvd":[{"id":"EUVD-2025-131938","description":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.","status":"published","published":"2025-11-12T19:18:44Z","modified":"2026-02-26T16:57:09Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:25.204929Z"}],"ghsa":[{"id":"GHSA-v6gr-9fpj-mghv","title":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser...","description":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.","status":"published","published":"2025-11-12T21:31:08Z","modified":"2025-11-12T21:31:14Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:04:46.408697Z"}],"nvd":[{"id":"CVE-2025-10495","description":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.","status":"published","published":"2025-11-12T20:15:35.507Z","modified":"2026-10-18T20:10:00.11Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:11:43.650381Z"}]}}