Lenovo
Vulnerability activity for Lenovo: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.5MediumJul 16, 2026Lenovo Smart Connect Auth bypass / access controlCVE-2026-6511During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.
- 8.8HighJul 16, 2026Lenovo XClarity Integrator for Microsoft Windows Admin Center Code / command injectionCVE-2026-14371The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.1.2% likely
- 7.3HighJul 16, 2026Lenovo App Store Privilege escalationCVE-2026-13104A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.3HighJul 16, 2026Lenovo App Store Path traversal / file handlingCVE-2026-13103A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code.
Top products
- App Store2 CVEs in the last year
- XClarity Integrator for Microsoft Windows Admin Center1 CVE in the last year
- Smart Connect1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.