Vendor
Lenovo
474 known vulnerabilities.
Products
BIOS 32
Desktop BIOS 16
Vantage 15
PC Manager 15
XClarity Controller 12
App Store 11
Printers 11
Service Bridge 10
ThinkPad BIOS 10
XClarity Administrator (LXCA) 9
Lenovo XClarity Administrator 9
PCManager 9
XClarity Administrator 9
ThinkSystem SMM 9
Iomega StorCenter 9
LenovoEMC 9
EZ Media and Backup Center 9
Browser 7
ThinkPad 6
Baiying 5
System Update 5
HX5530 Appliance (ThinkAgile) XCC 5
HX7530 Appliance (ThinkAgile) XCC 5
ST250 V3 (ThinkSystem) XCC 5
VX3331 Certified Node (ThinkAgile) XCC 5
HX Enclosure Certified Node (ThinkAgile) XCC 5
HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 5
HX1320 Appliance (ThinkAgile) XCC 5
HX1321 Certified Node (ThinkAgile) XCC 5
HX1331 Certified Node (ThinkAgile) XCC 5
HX1520-R Appliance (ThinkAgile) XCC 5
HX1521-R Certified Node (ThinkAgile) XCC 5
HX2320-E Appliance (ThinkAgile) XCC 5
HX2321 Certified Node (ThinkAgile) XCC 5
HX2330 Appliance (ThinkAgile) XCC 5
HX2331 Certified Node (ThinkAgile) XCC 5
HX2720-E Appliance (ThinkAgile) XCC 5
HX3320 Appliance (ThinkAgile) XCC 5
HX3321 Certified Node (ThinkAgile) XCC 5
Idea Tab Pro (TB373FU) 5
223 results · Clear filters · Feed
-
Medium 5.8
Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of Lenovo X…
-
Medium 5.2
A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux coul…
-
Medium 5.2
A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could a…
-
Medium 6.9
A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an …
-
Medium 4.8
A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local applicatio…
-
Medium 6.4
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlock…
-
Medium 5.5
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a lo…
-
Medium 6.8
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physic…
-
Medium 5.3
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that …
-
Medium 4.8
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusiv…
-
Medium 4.7
ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumsta…
Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) JYT TrackPoint Firmware for Windows 11 (Version 24H2) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD) T14 Gen 6 (Type 21QG, 21QH) Laptops (ThinkPad ) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad T14 Gen 6, T16 Gen 4 Windows -
Medium 6.1
Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack …
-
Medium 4.4
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitra…
-
Medium 6.0
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Managem…
-
Medium 4.4
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Managemen…
-
Medium 6.0
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settin…
-
Medium 5.5
During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smar…
-
Medium 6.7
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of som…
-
Medium 6.7
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller f…
-
Medium 4.3
A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese mar…
-
Medium 6.6
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during in…
-
Medium 6.7
A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could all…
-
Medium 5.5
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow …
-
Medium 5.5
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo B…
-
Medium 5.5
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could…
-
Medium 6.1
A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that coul…
-
Medium 6.7
A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local p…
-
Medium 5.3
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user c…
-
Medium 6.5
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads w…
-
Medium 5.5
A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user …
-
Medium 4.6
A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to rea…
-
Medium 5.5
An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow …
-
Medium 5.3
A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under c…
-
Medium 6.6
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during …
-
Medium 5.5
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or applicatio…
-
Medium 5.3
A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow infor…
-
Medium 5.5CVE-2025-9548 Public exploit
A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow …
-
Medium 5.4
A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited dev…
-
Medium 6.8
A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attack…
-
Medium 6.7
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in L…