Vendor

Lenovo

474 known vulnerabilities.

Products

BIOS 32 Desktop BIOS 16 Vantage 15 PC Manager 15 XClarity Controller 12 App Store 11 Printers 11 Service Bridge 10 ThinkPad BIOS 10 XClarity Administrator (LXCA) 9 Lenovo XClarity Administrator 9 PCManager 9 XClarity Administrator 9 ThinkSystem SMM 9 Iomega StorCenter 9 LenovoEMC 9 EZ Media and Backup Center 9 Browser 7 ThinkPad 6 Baiying 5 System Update 5 HX5530 Appliance (ThinkAgile) XCC 5 HX7530 Appliance (ThinkAgile) XCC 5 ST250 V3 (ThinkSystem) XCC 5 VX3331 Certified Node (ThinkAgile) XCC 5 HX Enclosure Certified Node (ThinkAgile) XCC 5 HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 5 HX1320 Appliance (ThinkAgile) XCC 5 HX1321 Certified Node (ThinkAgile) XCC 5 HX1331 Certified Node (ThinkAgile) XCC 5 HX1520-R Appliance (ThinkAgile) XCC 5 HX1521-R Certified Node (ThinkAgile) XCC 5 HX2320-E Appliance (ThinkAgile) XCC 5 HX2321 Certified Node (ThinkAgile) XCC 5 HX2330 Appliance (ThinkAgile) XCC 5 HX2331 Certified Node (ThinkAgile) XCC 5 HX2720-E Appliance (ThinkAgile) XCC 5 HX3320 Appliance (ThinkAgile) XCC 5 HX3321 Certified Node (ThinkAgile) XCC 5 Idea Tab Pro (TB373FU) 5

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

High 7.1

CVE-2026-0827 Public exploit

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the Hardware…

Lenovo Vantage Diagnostics

Apr 15, 2026
Medium 5.5

CVE-2025-9548 Public exploit

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow …

Lenovo Power Management driver

Oct 15, 2025
High 7.0

CVE-2025-8061 Public exploit

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 driv…

Lenovo Dispatcher 3.1 Driver Dispatcher 3.0 Driver

Sep 11, 2025
High 7.8

CVE-2025-0886 Public exploit

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, auth…

Lenovo Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW) Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7) Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF)

Jul 17, 2025
High 7.8

CVE-2025-2502 Public exploit

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to el…

Lenovo PC Manager

May 30, 2025
High 7.8

CVE-2022-3699 Public exploit

A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo …

Lenovo Diagnostics HardwareScanPlugin

Oct 24, 2023
Medium 6.7

CVE-2021-3972 Public exploit

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS …

Lenovo Notebook BIOS

Apr 22, 2022
Medium 4.4

CVE-2019-6192 Public exploit

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a…

Lenovo Power Management driver

Dec 10, 2019
Unscored —

CVE-2018-9075 Public exploit

Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary co…

Lenovo Iomega StorCenter EZ Media and Backup Center LenovoEMC

Sep 28, 2018