https://vulnogram.org/ Most recent CVEs assigned by Lenovo Group Ltd. (lenovo). https://vulnogram.org/seaview/icons/lenovo.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-92777 https://vulnogram.org/CVE-2026-92777 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. Medium Thu, 15 Oct 2026 23:18:01 GMT https://vulnogram.org/CVE-2026-92629 https://vulnogram.org/CVE-2026-92629 A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Thu, 15 Oct 2026 23:17:53 GMT https://vulnogram.org/CVE-2026-89062 https://vulnogram.org/CVE-2026-89062 A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error. Medium Thu, 15 Oct 2026 23:17:46 GMT https://vulnogram.org/CVE-2026-89057 https://vulnogram.org/CVE-2026-89057 A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access. High Thu, 15 Oct 2026 23:17:37 GMT https://vulnogram.org/CVE-2026-75941 https://vulnogram.org/CVE-2026-75941 A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code. High Thu, 15 Oct 2026 23:17:26 GMT https://vulnogram.org/CVE-2026-16755 https://vulnogram.org/CVE-2026-16755 A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information. Medium Thu, 15 Oct 2026 23:17:07 GMT https://vulnogram.org/CVE-2026-16754 https://vulnogram.org/CVE-2026-16754 A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications. Medium Thu, 15 Oct 2026 23:16:59 GMT https://vulnogram.org/CVE-2026-93832 https://vulnogram.org/CVE-2026-93832 A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps. Medium Thu, 01 Oct 2026 19:44:12 GMT https://vulnogram.org/CVE-2026-11813 https://vulnogram.org/CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges. High Thu, 10 Sep 2026 21:00:31 GMT https://vulnogram.org/CVE-2026-18994 https://vulnogram.org/CVE-2026-18994 A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the appl… High Thu, 10 Sep 2026 21:00:25 GMT https://vulnogram.org/CVE-2026-19136 https://vulnogram.org/CVE-2026-19136 A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link th… High Thu, 10 Sep 2026 21:00:19 GMT https://vulnogram.org/CVE-2026-63427 https://vulnogram.org/CVE-2026-63427 An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges. High Thu, 10 Sep 2026 21:00:13 GMT https://vulnogram.org/CVE-2026-75940 https://vulnogram.org/CVE-2026-75940 A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information. Critical Network Exploitable Thu, 10 Sep 2026 21:00:05 GMT https://vulnogram.org/CVE-2026-18058 https://vulnogram.org/CVE-2026-18058 The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system. High Wed, 02 Sep 2026 15:14:44 GMT https://vulnogram.org/CVE-2026-14256 https://vulnogram.org/CVE-2026-14256 ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash. Medium Thu, 13 Aug 2026 14:54:03 GMT https://vulnogram.org/CVE-2026-15994 https://vulnogram.org/CVE-2026-15994 During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges. High Thu, 13 Aug 2026 14:53:05 GMT https://vulnogram.org/CVE-2026-63423 https://vulnogram.org/CVE-2026-63423 During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Thu, 13 Aug 2026 14:52:58 GMT https://vulnogram.org/CVE-2026-63424 https://vulnogram.org/CVE-2026-63424 During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges. High Thu, 13 Aug 2026 14:52:52 GMT https://vulnogram.org/CVE-2026-63425 https://vulnogram.org/CVE-2026-63425 During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Thu, 13 Aug 2026 14:52:45 GMT https://vulnogram.org/CVE-2026-63426 https://vulnogram.org/CVE-2026-63426 During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges. High Thu, 13 Aug 2026 14:52:38 GMT https://vulnogram.org/CVE-2026-12036 https://vulnogram.org/CVE-2026-12036 An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges. High Thu, 13 Aug 2026 14:52:27 GMT https://vulnogram.org/CVE-2026-6387 https://vulnogram.org/CVE-2026-6387 A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Thu, 13 Aug 2026 14:52:21 GMT https://vulnogram.org/CVE-2026-16793 https://vulnogram.org/CVE-2026-16793 An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a… High Tue, 04 Aug 2026 19:48:11 GMT https://vulnogram.org/CVE-2026-16792 https://vulnogram.org/CVE-2026-16792 An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middl… High Tue, 04 Aug 2026 19:48:03 GMT https://vulnogram.org/CVE-2026-16791 https://vulnogram.org/CVE-2026-16791 A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is ex… Low Tue, 04 Aug 2026 19:47:55 GMT https://vulnogram.org/CVE-2026-10590 https://vulnogram.org/CVE-2026-10590 A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler. Medium Thu, 16 Jul 2026 16:50:14 GMT https://vulnogram.org/CVE-2026-10589 https://vulnogram.org/CVE-2026-10589 A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode. Medium Thu, 16 Jul 2026 16:50:06 GMT https://vulnogram.org/CVE-2026-10588 https://vulnogram.org/CVE-2026-10588 A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. Medium Thu, 16 Jul 2026 16:49:59 GMT https://vulnogram.org/CVE-2026-10587 https://vulnogram.org/CVE-2026-10587 A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode. Medium Thu, 16 Jul 2026 16:49:51 GMT https://vulnogram.org/CVE-2026-14371 https://vulnogram.org/CVE-2026-14371 The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands. High Thu, 16 Jul 2026 16:49:12 GMT https://vulnogram.org/CVE-2026-13104 https://vulnogram.org/CVE-2026-13104 A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Thu, 16 Jul 2026 16:49:06 GMT https://vulnogram.org/CVE-2026-13103 https://vulnogram.org/CVE-2026-13103 A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code. High Thu, 16 Jul 2026 16:49:00 GMT https://vulnogram.org/CVE-2026-9046 https://vulnogram.org/CVE-2026-9046 A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execut… High Thu, 16 Jul 2026 16:48:47 GMT https://vulnogram.org/CVE-2026-6511 https://vulnogram.org/CVE-2026-6511 During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system. Medium Thu, 16 Jul 2026 16:48:30 GMT https://vulnogram.org/CVE-2025-10238 https://vulnogram.org/CVE-2025-10238 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM). High Wed, 10 Jun 2026 14:11:21 GMT https://vulnogram.org/CVE-2025-10237 https://vulnogram.org/CVE-2025-10237 During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions. High Wed, 10 Jun 2026 14:10:56 GMT https://vulnogram.org/CVE-2026-6090 https://vulnogram.org/CVE-2026-6090 A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Wed, 10 Jun 2026 14:09:47 GMT https://vulnogram.org/CVE-2026-8637 https://vulnogram.org/CVE-2026-8637 A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Wed, 10 Jun 2026 14:09:32 GMT https://vulnogram.org/CVE-2026-9045 https://vulnogram.org/CVE-2026-9045 During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges. High Wed, 10 Jun 2026 14:09:19 GMT https://vulnogram.org/CVE-2026-7516 https://vulnogram.org/CVE-2026-7516 A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents. Medium Network Exploitable Wed, 10 Jun 2026 14:08:47 GMT https://vulnogram.org/CVE-2026-5804 https://vulnogram.org/CVE-2026-5804 An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external storage which could be used by third party apps run… High Tue, 19 May 2026 14:42:21 GMT https://vulnogram.org/CVE-2026-6282 https://vulnogram.org/CVE-2026-6282 A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device. High Wed, 13 May 2026 14:15:15 GMT https://vulnogram.org/CVE-2026-6281 https://vulnogram.org/CVE-2026-6281 A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device. High Wed, 13 May 2026 14:15:06 GMT https://vulnogram.org/CVE-2026-4145 https://vulnogram.org/CVE-2026-4145 During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges. High Wed, 15 Apr 2026 12:28:19 GMT https://vulnogram.org/CVE-2026-4135 https://vulnogram.org/CVE-2026-4135 During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges. Medium Wed, 15 Apr 2026 12:28:12 GMT https://vulnogram.org/CVE-2026-4134 https://vulnogram.org/CVE-2026-4134 During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges. High Wed, 15 Apr 2026 12:28:05 GMT https://vulnogram.org/CVE-2026-1636 https://vulnogram.org/CVE-2026-1636 A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated privileges. Medium Wed, 15 Apr 2026 12:27:54 GMT https://vulnogram.org/CVE-2026-0827 https://vulnogram.org/CVE-2026-0827 During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to p… High Wed, 15 Apr 2026 12:27:45 GMT https://vulnogram.org/CVE-2026-2640 https://vulnogram.org/CVE-2026-2640 During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes. Medium Wed, 11 Mar 2026 20:23:12 GMT https://vulnogram.org/CVE-2026-1717 https://vulnogram.org/CVE-2026-1717 An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to terminate arbitrary processes with elevated privileges. Medium Wed, 11 Mar 2026 20:22:50 GMT