Skip to content
Lenovo vulnerabilities
Products
Show 160 moreShow less
Newest
-
@vitest browser, ui, vitest-dev vitest +1 more +3 more
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
CVE-2026-112948
Fix available
6.5 Medium
-
lenovo idea tab pro (tb373fu), idea tab/ lenovo tab k11 gen 2 (tb336fu), idea tab/ lenovo tab k11 gen 2 (tb336fu/tb336zu) +24 more +26 more
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with...
CVE-2026-92777
5.4 Medium
-
lenovo baiying pc client
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client,...
CVE-2026-92629
7.0 High
-
lenovo energy management driver
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver...
CVE-2026-89062
6.8 Medium
-
lenovo idea tab pro (tb373fu), idea tab/ lenovo tab k11 gen 2 (tb336fu), idea tab/ lenovo tab k11 gen 2 (tb336fu/tb336zu) +28 more +30 more
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could...
CVE-2026-89057
7.0 High
-
lenovo legion zone application
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed...
CVE-2026-75941
8.6 High
-
lenovo smart camera c33, smart camera c33 pro, smart camera c35 +9 more +11 more
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the...
CVE-2026-16755
6.0 Medium
-
lenovo smart camera c33, smart camera c33 pro, smart camera c35 +9 more +11 more
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33...
CVE-2026-16754
5.9 Medium
-
lenovo filez client, filez enterprise +1 more
A potential improper permissions vulnerability was reported in the Lenovo Filez Client...
CVE-2026-11813
8.5 High
-
lenovo file manager application
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android...
CVE-2026-18994
8.4 High
-
lenovo tianxi ai agent pc application
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application,...
CVE-2026-19136
8.4 High
-
lenovo software fix
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a...
CVE-2026-63427
8.5 High
-
lenovo health application
A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the...
CVE-2026-75940
9.3 Critical
-
lenovo 100w gen 4 laptop (lenovo) elan trackpoint driver for windows 11 (version 22h2 or later) - lenovo 100w gen 4, 300w yoga gen 4, 500w yoga gen 4, 100w gen 5 (type 83ld, 83le) laptop (lenovo) elan trackpoint driver for windows 11 (version 23h2 or later) - lenovo 100w gen 5, 300w 2-in-1 gen 5, 500w 2-in-1 gen 5, 11e yoga gen 6 (type 20se, 20sf) laptop (thinkpad) elan clickpad driver for windows 11 (version 21h2 or later), 10 (version 1809 or later) - thinkpad yoga 11e 6th gen +259 more +261 more
ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that,...
CVE-2026-14256
5.7 Medium
-
lenovo commercial vantage, vantage +1 more
During an internal security assessment, an improper link following vulnerability was identified...
CVE-2026-15994
7.3 High
-
lenovo accessories and display manager
During an internal security assessment, a potential vulnerability was discovered in Lenovo...
CVE-2026-63423
8.5 High
-
lenovo dock manager
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock...
CVE-2026-63424
7.0 High
-
lenovo dock manager
During an internal security assessment, a potential improper permissions vulnerability was...
CVE-2026-63425
8.5 High
-
lenovo dock manager
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock...
CVE-2026-63426
6.9 Medium
-
lenovo vantage
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage...
CVE-2026-12036
6.9 Medium
-
dell system update
A potential authentication bypass vulnerability was reported in Lenovo System Update that could...
CVE-2026-6387
7.3 High
-
lenovo xclarity orchestrator
Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
CVE-2026-16793
8.7 High
-
lenovo xclarity orchestrator
Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
CVE-2026-16792
7.0 High
-
lenovo xclarity essentials onecli
Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI
CVE-2026-16791
1.0 Low
-
lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more
A potential missing authentication vulnerability could allow a local privileged attacker to use...
CVE-2026-10590
6.7 Medium
-
lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more
A potential out of bounds write vulnerability could allow a local privileged attacker to execute...
CVE-2026-10589
6.8 Medium
-
lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more
A potential vulnerability could allow a local privileged attacker to disclose the address of...
CVE-2026-10588
6.7 Medium
-
lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify...
CVE-2026-10587
6.8 Medium
-
lenovo xclarity integrator for microsoft windows admin center
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on...
CVE-2026-14371
8.8 High
-
lenovo app store
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the...
CVE-2026-13104
7.0 High
-
lenovo app store
A potential path traversal vulnerability was reported in Lenovo App Store, distributed...
CVE-2026-13103
7.0 High
-
lenovo app store, legion zone +1 more
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App...
CVE-2026-9046
7.3 High
-
lenovo smart connect
During an internal security assessment, a potential improper access control vulnerability was...
CVE-2026-6511
6.8 Medium
-
lenovo browser
Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass
CVE-2026-52842
9.3 Critical
-
lenovo browser
Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode
CVE-2026-52843
9.3 Critical
-
lenovo pc manager
Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path
CVE-2026-15515
7.3 High
-
lenovo e14 gen 4 (type 21e3, 21e4) laptops (thinkpad) bios, e14 gen 5 (type 21jr, 21js) laptop (thinkpad) bios, e14 gen 6 (type 21m3, 21m4) laptops (thinkpad) bios +105 more +107 more
During an internal security assessment, a potential out-of-bounds write vulnerability was...
CVE-2025-10238
8.4 High
-
lenovo l13 (type 20r3, 20r4) laptops (thinkpad) bios, l13 2-in-1 gen 6 (type 21r7, 21r8) laptops (thinkpad) bios, l13 gen 4 (type 21fg, 21fh) laptop (thinkpad) bios +92 more +94 more
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad...
CVE-2025-10237
8.4 High
-
lenovo smart connect
A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could...
CVE-2026-6090
7.3 High
-
lenovo lanschool classic
A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client...
CVE-2026-8637
8.5 High
-
lenovo accessories and display manager for enterprise
During an internal security assessment, a potential vulnerability was discovered in Lenovo...
CVE-2026-9045
8.5 High
-
lenovo application
A vulnerability was identified in the Lenovo Android Application, distributed exclusively on...
CVE-2026-7516
5.1 Medium
-
lenovo home storage hub t20, home storage hub x20, personal cloud a1 +7 more +9 more
A potential improper file path validation vulnerability was reported in some Lenovo Personal...
CVE-2026-6282
8.6 High
-
lenovo home storage hub t20, home storage hub x20, personal cloud a1 +7 more +9 more
A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could...
CVE-2026-6281
8.7 High
-
lenovo software fix
During an internal security assessment, a potential vulnerability was discovered in Lenovo...
CVE-2026-4145
8.5 High
-
lenovo software fix
During an internal security assessment, a potential vulnerability was discovered in Lenovo...
CVE-2026-4135
5.2 Medium
-
lenovo software fix
During an internal security assessment, a potential vulnerability was discovered in Lenovo...
CVE-2026-4134
7.0 High
-
lenovo service bridge
A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain...
CVE-2026-1636
5.4 Medium
-
lenovo diagnostics, hardware scan, vantage +2 more
During an internal security assessment, a potential vulnerability was discovered in Lenovo...
CVE-2026-0827
Public exploit
6.9 Medium
-
lenovo pc manager, pcmanager +1 more
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC...
CVE-2026-2640
6.8 Medium
- Show olderLoading…