lenovo Vulnerability Advisory Catalog

Total 374 security vulnerabilities recorded for lenovo software and firmware.

← Back to All Vendors
CVE-2026-1717 MEDIUM
Component: vantage

An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local...

📅 2026-03-11
CVSS 5.5 Dossier →
Component: vantage

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local aut...

📅 2026-03-11
CVSS 7.1 Dossier →
Component: vantage

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local aut...

📅 2026-03-11
CVSS 7.1 Dossier →
Component: thinkplus_fu100_firmware

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication...

📅 2026-01-14
CVSS 7.8 Dossier →
Component: thinkplus_fu100_firmware

A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive dev...

📅 2026-01-14
CVSS 5.5 Dossier →
Component: thinkplus_fu100_firmware

A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive....

📅 2026-01-14
CVSS 4.6 Dossier →
Component: app_store

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privi...

📅 2025-11-12
CVSS 7.3 Dossier →
Component: pcmanager

A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges....

📅 2025-10-15
CVSS 7.8 Dossier →
Component: pcmanager

A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authen...

📅 2025-10-15
CVSS 7.8 Dossier →
Component: pcmanager

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges....

📅 2025-08-18
CVSS 7.8 Dossier →
Component: commercial_vantage

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with el...

📅 2025-07-17
CVSS 7.8 Dossier →
Component: commercial_vantage

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with el...

📅 2025-07-17
CVSS 7.8 Dossier →
CVE-2025-6230 MEDIUM
Component: commercial_vantage

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited...

📅 2025-07-17
CVSS 5.3 Dossier →
Component: pcmanager

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions ...

📅 2025-05-30
CVSS 7.1 Dossier →
Component: pcmanager

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges....

📅 2025-05-30
CVSS 7.8 Dossier →
Component: pcmanager

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges....

📅 2025-05-30
CVSS 7.8 Dossier →
Component: starstudio

A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated privileges....

📅 2024-10-11
CVSS 7.8 Dossier →
CVE-2024-5474 MEDIUM
Component: dolby_vision_provisioning

A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 tha...

📅 2024-10-11
CVSS 5.5 Dossier →
Component: lock_screen

A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges....

📅 2024-10-11
CVSS 7.8 Dossier →
Component: emulator

A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges....

📅 2024-10-11
CVSS 7.8 Dossier →
Component: app_store

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges....

📅 2024-10-11
CVSS 7.8 Dossier →
Component: superfile

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges....

📅 2024-10-11
CVSS 7.8 Dossier →
Component: xclarity_administrator

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a spe...

📅 2024-09-13
CVSS 6.3 Dossier →
Component: xclarity_administrator

A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges....

📅 2024-09-13
CVSS 4.3 Dossier →
Page 1 of 16 (374 Total Records)