Skip to content
OpenAdvisories
High · 7.0 CVE-2026-9046 EUVD-2026-44975GHSA-6j6v-724c-h5fm

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclu…

Published Jul 16, 2026 · Updated Jul 16, 2026 · Assigned by lenovo

Description

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Lenovo Legion Zone < 2.0.26 2.0.26
Lenovo App Store < 9.0.29 9.0.29

References