Lenovo Browser vulnerabilities

• @vitest browser, ui, vitest-dev vitest +1 more +3 more Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file CVE-2026-112948 Fix available 6.5 MediumOctober 20, 2026
• lenovo browser Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass CVE-2026-52842 9.3 CriticalJuly 15, 2026
• lenovo browser Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode CVE-2026-52843 9.3 CriticalJuly 15, 2026
• lenovo app store, browser +1 more A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser... CVE-2025-12046 8.5 HighDecember 10, 2025
• lenovo app store, browser, legion zone +1 more +3 more A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser... CVE-2025-10495 7.7 HighNovember 12, 2025
• lenovo browser A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal... CVE-2025-9201 8.5 HighSeptember 11, 2025
• lenovo app store, browser, pc manager +2 more A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5... CVE-2025-4657 8.4 HighJuly 17, 2025
• lenovo browser A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an... CVE-2025-6248 7.1 HighJuly 17, 2025
• lenovo browser Steel Browser files.routes.ts handleFileUpload path traversal CVE-2025-6152 5.3 MediumJune 17, 2025
• lenovo browser A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 CVE-2023-26226 7.4 HighMay 30, 2025
• lenovo browser Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack. CVE-2021-25262 6.9 MediumMay 21, 2025
• lenovo app store, browser, pc manager +2 more A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo... CVE-2024-10254 4.7 MediumJanuary 14, 2025
• lenovo app store, browser, pc manager +2 more A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store... CVE-2024-10253 4.7 MediumJanuary 14, 2025
• lenovo browser DLL Hijacking in Yandex Browser CVE-2024-6473 Public exploit 8.4 HighSeptember 3, 2024
• lenovo browser hd, browser mobile +1 more A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android... CVE-2023-6540 6.5 MediumJanuary 3, 2024
• lenovo browser This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... CVE-2019-13322 7.5 HighFebruary 10, 2020
• lenovo browser This vulnerability allows network adjacent attackers to execute arbitrary code on affected... CVE-2019-13321 5.5 MediumFebruary 10, 2020
• lenovo browser, mi mi6 browser +1 more This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... CVE-2019-6743 7.8 HighJune 3, 2019
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0151 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0150 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0141 EPSS 48.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0138 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0137 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0136 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0134 EPSS 26.4% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0133 EPSS 24.7% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0132 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0131 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0094 EPSS 29.0% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0071 EPSS 31.9% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0070 Public exploit EPSS 76.7% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0067 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0035 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge, internet explorer +2 more Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via... CVE-2017-0033 4.3 MediumMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0032 EPSS 15.2% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0015 EPSS 26.4% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft edge +1 more A remote code execution vulnerability exists in the way affected Microsoft scripting engines... CVE-2017-0010 EPSS 24.7% 7.5 HighMarch 17, 2017
• lenovo browser, microsoft internet explorer +1 more Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information... CVE-2017-0009 EPSS 36.5% 4.3 MediumMarch 17, 2017