Lenovo vulnerabilities
We track 109 vulnerabilities in Lenovo products across 60+ products. 109 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 11, 2026.
Latest Lenovo vulnerabilities
- 7.3 High severity
App Store: Incorrect Default Permissions
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.
- 7.5 High severity
Scanner Pro: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the affected system.
- 7.5 High severity
App Store: Improper Certificate Validation
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.
- 7.8 High severity
PC Manager: Uncontrolled Search Path Element
A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
- 7.8 High severity
Browser: Uncontrolled Search Path Element
A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges.
- 8.8 High severity
XClarity Orchestrator (LXCO): Unprotected Alternate Channel
An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to cre
- 7.0 High severity
Dispatcher 3.0 Driver: Exposed IOCTL with Insufficient Access Control
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo
- 7.4 High severity
Browser: Improper Neutralization of Input During Web Page Generation
A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an attacker to obtain sensitive information if a user visits a web page with specially crafted content.
- 7.8 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.
- 7.8 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.
- 7.8 High severity
Elliptic Virtual Lock Sensor Service For…: Incorrect Default Permissions
An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges.
- 7.1 High severity
PC Manager: Incorrect Permission Assignment for Critical Resource
An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.
- 7.8 High severity
Vantage: Execution with Unnecessary Privileges
An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker to elevate privileges on the system. This vulnerability only affects Vantage installed on these device
- 7.6 High severity
FileZ Client: Improper Validation of Specified Type of Input
An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading.
- 8.1 High severity
Accessories and Display Manager: Improper Certificate Validation
An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges.
- 7.8 High severity
Accessories and Display Manager: Improper Certificate Validation
An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges.
- 7.8 High severity
PC Manager AI intelligent scenario: Uncontrolled Search Path Element
A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
- 7.8 High severity
Display Control Center: Incorrect Default Permissions
An insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM) that could allow a local attacker to escalate privileges to kernel.
- 7.8 High severity
Display Control Center: Incorrect Default Permissions
An insecure permissions vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM) that could allow a local attacker to escalate privileges.
- 7.8 High severity
A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version…
A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges.
- 7.2 High severity
XClarity Controller: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
- 7.2 High severity
XClarity Controller: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
- 7.2 High severity
XClarity Controller: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
- 7.2 High severity
XClarity Controller: Stack-based Buffer Overflow
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
- 7.2 High severity
XClarity Controller: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
- 7.5 High severity
Service Bridge: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited.
- 7.5 High severity
Printers: Stack-based Buffer Overflow
A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request.
- 7.2 High severity
SMM, SMM2, FPC: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
- 7.5 High severity
SMM, SMM2, FPC: Missing Authentication for Critical Functionality
An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information.
- 8.8 High severity
SMM, SMM2, FPC: Improper Neutralization of Special Elements used in an OS Command
A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint.
- 7.2 High severity
SMM, SMM2, FPC: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI.
- 7.5 High severity
A denial of service vulnerability was reported in some Lenovo Printers that could allow an…
A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device to crash by sending crafted LPD packets.
- 7.8 High severity
Vantage: Improper Certificate Validation
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.
- 7.8 High severity
Tablet: Incorrect Privilege Assignment
A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands.
- 7.5 High severity
Lenovo Browser Mobile: Improper Control of Generation of Code
A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information.
- 7.8 High severity
Universal Device Client (UDC): Uncontrolled Search Path Element
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.