Lenovo: Security Vulnerabilities
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.
CVSS Score
6.9
EPSS Score
0.0
Published
2026-03-11
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to terminate arbitrary processes with elevated privileges.
CVSS Score
6.8
EPSS Score
0.0
Published
2026-03-11
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.
CVSS Score
6.9
EPSS Score
0.0
Published
2026-03-11
A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive.
CVSS Score
5.1
EPSS Score
0.0
Published
2026-01-14
A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information.
CVSS Score
6.8
EPSS Score
0.0
Published
2026-01-14
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
CVSS Score
7.3
EPSS Score
0.0
Published
2026-01-14
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.
CVSS Score
7.0
EPSS Score
0.0
Published
2025-11-12
A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges.
CVSS Score
8.5
EPSS Score
0.0
Published
2025-10-15
A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
CVSS Score
8.5
EPSS Score
0.0
Published
2025-10-15
An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges.
CVSS Score
8.5
EPSS Score
0.0
Published
2025-08-18
Page 1