Lenovo: Security Vulnerabilities
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code.
CVSS Score
7.5
EPSS Score
0.001
Published
2026-03-11
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.
CVSS Score
6.8
EPSS Score
0.001
Published
2026-03-11
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.
CVSS Score
6.0
EPSS Score
0.001
Published
2026-03-11
A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and cause a Windows blue screen error.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-03-11
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue screen error.
CVSS Score
6.8
EPSS Score
0.001
Published
2026-03-11
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-03-11
A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive data stored in a log file.
CVSS Score
2.4
EPSS Score
0.001
Published
2026-03-11
A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive.
CVSS Score
5.1
EPSS Score
0.001
Published
2026-01-14
A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information.
CVSS Score
6.8
EPSS Score
0.001
Published
2026-01-14
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
CVSS Score
7.3
EPSS Score
0.001
Published
2026-01-14