Lenovo

474 results · Feed

• High 7.1
  CVE-2026-81936

  An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 (XCC3) versio…

  Lenovo XClarity Controller
  Nov 11, 2026
• Medium 5.8
  CVE-2026-65952

  Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of Lenovo X…

  Lenovo OneCLI
  Nov 11, 2026
• Medium 5.2
  CVE-2026-65951

  A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux coul…

  Lenovo OneCLI
  Nov 11, 2026
• Medium 5.2
  CVE-2026-65950

  A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could a…

  Lenovo OneCLI
  Nov 11, 2026
• High 8.6
  CVE-2026-65949

  Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows A…

  Lenovo XClarity Integrator for WAC
  Nov 11, 2026
• Medium 6.9
  CVE-2026-116633

  A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an …

  Lenovo Idea Tab Pro (TB373FU) Yoga Tab (TB710FU) Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FU
  Nov 11, 2026
• Medium 4.8
  CVE-2026-119238

  A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local applicatio…

  Lenovo XiangBangbang Application
  Nov 11, 2026
• High 8.5
  CVE-2026-89061

  During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed excl…

  Lenovo PC Manager
  Nov 11, 2026
• Medium 6.4
  CVE-2026-92777

  A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlock…

  Lenovo Idea Tab Pro (TB373FU) Tab K9 (TB305FU) Tab M10 5G (TB360ZU)
  Oct 15, 2026
• High 7.3
  CVE-2026-92629

  A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in t…

  Lenovo Baiying PC Client
  Oct 15, 2026
• Medium 5.5
  CVE-2026-89062

  A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a lo…

  Lenovo Energy Management Driver
  Oct 15, 2026
• Medium 6.8
  CVE-2026-89057

  A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physic…

  Lenovo Idea Tab Pro (TB373FU) Tab Extreme (TB570ZU/TB570FU) Tab K9 (TB305XU)
  Oct 15, 2026
• High 8.0
  CVE-2026-75941

  A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese ma…

  Lenovo Legion Zone Application
  Oct 15, 2026
• Medium 5.3
  CVE-2026-16755

  A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that …

  Lenovo Smart Camera RQ3 Smart Network PTZ X5T Smart Network PTZ X5E
  Oct 15, 2026
• Medium 4.8
  CVE-2026-16754

  A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusiv…

  Lenovo Smart Network PTZ X5Q Smart Camera X6T Smart Camera C33 Pro
  Oct 15, 2026
• High 7.8
  CVE-2026-11813

  A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a l…

  Lenovo FileZ Client FileZ Enterprise
  Sep 10, 2026
• High 7.1
  CVE-2026-18994

  A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distribut…

  Lenovo File Manager Application
  Sep 10, 2026
• High 7.8
  CVE-2026-19136

  A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively…

  Lenovo Tianxi AI Agent PC Application
  Sep 10, 2026
• High 7.8
  CVE-2026-63427

  An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated use…

  Lenovo Software Fix
  Sep 10, 2026
• Critical 9.1
  CVE-2026-75940

  A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that …

  Lenovo Health Application
  Sep 10, 2026
• Medium 4.7
  CVE-2026-14256

  ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumsta…

  Lenovo E14 Gen 7 (Type 21T0, 21T1) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad P16s Gen 4 (Type 21QV, 21QW) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or Later) - ThinkPad P14s Gen 6 (Type 21QT, 21QU), P16s Gen 4 (Type 21QV, 21QW) T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14s Gen 6 (Type 21TB, 21TC) Windows
  Aug 13, 2026
• High 7.0
  CVE-2026-15994

  During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and L…

  Lenovo Vantage Commercial Vantage
  Aug 13, 2026
• High 7.8
  CVE-2026-63423

  During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Mana…

  Lenovo Accessories and Display Manager
  Aug 13, 2026
• High 7.3
  CVE-2026-63424

  During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could al…

  Lenovo Dock Manager
  Aug 13, 2026
• High 7.8
  CVE-2026-63425

  During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Ma…

  Lenovo Dock Manager
  Aug 13, 2026
• High 7.1
  CVE-2026-63426

  During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allo…

  Lenovo Dock Manager
  Aug 13, 2026
• High 7.1
  CVE-2026-12036

  An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial …

  Lenovo Vantage
  Aug 13, 2026
• High 7.0
  CVE-2026-6387

  A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authentic…

  Lenovo System Update
  Aug 13, 2026
• High 8.8
  CVE-2026-16793

  Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator

  An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privilege…

  Lenovo XClarity Orchestrator
  Aug 4, 2026
• Medium 6.1
  CVE-2026-16792

  Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator

  An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack …

  Lenovo XClarity Orchestrator
  Aug 4, 2026
• Low 3.9
  CVE-2026-16791

  Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

  A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed wi…

  Lenovo XClarity Essentials OneCLI
  Aug 4, 2026
• Medium 4.4
  CVE-2026-10590

  A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitra…

  Lenovo Lenovo V15 G4 AMN BIOS IdeaPad Slim 3 15AMN8 BIOS Legion Pro 5 16ARX8 BIOS
  Jul 16, 2026
• Medium 6.0
  CVE-2026-10589

  A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Managem…

  Lenovo IdeaPad Slim 3 15AMN8 BIOS Lenovo V15 G4 AMN BIOS Lenovo V15 G5 IRL BIOS
  Jul 16, 2026
• Medium 4.4
  CVE-2026-10588

  A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Managemen…

  Lenovo IdeaPad Slim 3 15AMN8 BIOS Lenovo V15 G4 AMN BIOS LOQ 15ARP10E BIOS
  Jul 16, 2026
• Medium 6.0
  CVE-2026-10587

  A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settin…

  Lenovo Lenovo V15 G4 AMN BIOS IdeaPad Slim 3 15AMN8 BIOS IdeaPad Pro 5 16IRH8 BIOS
  Jul 16, 2026
• High 8.8
  CVE-2026-14371

  The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vu…

  Lenovo XClarity Integrator for Microsoft Windows Admin Center Windows
  Jul 16, 2026
• High 7.3
  CVE-2026-13104

  A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could a…

  Lenovo App Store
  Jul 16, 2026
• High 7.3
  CVE-2026-13103

  A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese marke…

  Lenovo App Store
  Jul 16, 2026
• High 7.0
  CVE-2026-9046

  A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows application…

  Lenovo App Store Legion Zone
  Jul 16, 2026
• Medium 5.5
  CVE-2026-6511

  During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smar…

  Lenovo Smart Connect
  Jul 16, 2026