Skip to content
OpenAdvisories
High · 7.8 CVE-2025-12046 EUVD-2025-202423GHSA-82hr-h35p-vq5v

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated u…

Published Dec 10, 2025 · Updated Dec 10, 2025 · Assigned by lenovo

Description

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.

Affected products

VendorProductAffectedFixed
Lenovo App Store < 9.0.2530.1027 9.0.2530.1027
Lenovo Browser < 9.0.6.11071 9.0.6.11071

References