Lenovo: Security Vulnerabilities
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.
CVSS Score
7.0
EPSS Score
0.001
Published
2025-11-12
A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-10-15
A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-10-15
An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges.
CVSS Score
8.5
EPSS Score
0.001
Published
2025-08-18
A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.
CVSS Score
4.8
EPSS Score
0.002
Published
2025-07-17
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-07-17
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-07-17
An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-05-30
An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.
CVSS Score
8.5
EPSS Score
0.002
Published
2025-05-30
An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.
CVSS Score
6.9
EPSS Score
0.001
Published
2025-05-30