Vendor
Lenovo
474 known vulnerabilities.
Products
BIOS 32
Desktop BIOS 16
Vantage 15
PC Manager 15
XClarity Controller 12
App Store 11
Printers 11
Service Bridge 10
ThinkPad BIOS 10
XClarity Administrator (LXCA) 9
Lenovo XClarity Administrator 9
PCManager 9
XClarity Administrator 9
ThinkSystem SMM 9
Iomega StorCenter 9
LenovoEMC 9
EZ Media and Backup Center 9
Browser 7
ThinkPad 6
Baiying 5
System Update 5
HX5530 Appliance (ThinkAgile) XCC 5
HX7530 Appliance (ThinkAgile) XCC 5
ST250 V3 (ThinkSystem) XCC 5
VX3331 Certified Node (ThinkAgile) XCC 5
HX Enclosure Certified Node (ThinkAgile) XCC 5
HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 5
HX1320 Appliance (ThinkAgile) XCC 5
HX1321 Certified Node (ThinkAgile) XCC 5
HX1331 Certified Node (ThinkAgile) XCC 5
HX1520-R Appliance (ThinkAgile) XCC 5
HX1521-R Certified Node (ThinkAgile) XCC 5
HX2320-E Appliance (ThinkAgile) XCC 5
HX2321 Certified Node (ThinkAgile) XCC 5
HX2330 Appliance (ThinkAgile) XCC 5
HX2331 Certified Node (ThinkAgile) XCC 5
HX2720-E Appliance (ThinkAgile) XCC 5
HX3320 Appliance (ThinkAgile) XCC 5
HX3321 Certified Node (ThinkAgile) XCC 5
Idea Tab Pro (TB373FU) 5
142 results · Clear filters · Feed
-
High 7.1
An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 (XCC3) versio…
-
High 8.6
Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows A…
-
High 8.5
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed excl…
-
High 7.3
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in t…
-
High 8.0
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese ma…
-
High 7.8
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a l…
-
High 7.1
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distribut…
-
High 7.8
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively…
-
High 7.8
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated use…
-
High 7.0
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and L…
-
High 7.8
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Mana…
-
High 7.3
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could al…
-
High 7.8
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Ma…
-
High 7.1
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allo…
-
High 7.1
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial …
-
High 7.0
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authentic…
-
High 8.8
Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privilege…
-
High 8.8
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vu…
-
High 7.3
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could a…
-
High 7.3
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese marke…
-
High 7.0
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows application…
-
High 7.0
A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticat…
-
High 7.8
A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could …
-
High 7.8
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Mana…
-
High 8.1
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that…
-
High 8.8
A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenti…
-
High 7.8
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allo…
-
High 7.3
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during in…
-
High 7.1CVE-2026-0827 Public exploit
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the Hardware…
-
High 7.1
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiyi…
-
High 7.1
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiyi…
-
High 7.1
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user c…
-
High 7.8
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass …
-
High 7.8
An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user…
-
High 7.8
A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that c…
-
High 7.8
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a l…
-
High 7.5
An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assess…
-
High 7.5
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zo…
-
High 7.3
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to e…
-
High 7.8
A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment …