Lenovo
Lenovo APP Store: vulnerabilidades y CVE
Lenovo APP Store tiene 11 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses6
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-9046 | Alta (7.3) | 0.13% | — | 16 jul 2026 | A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition,… |
| CVE-2026-13104 | Alta (7) | 0.17% | — | 16 jul 2026 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
| CVE-2026-13103 | Alta (7) | 0.18% | — | 16 jul 2026 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code. |
| CVE-2025-12046 | Alta (8.5) | 0.14% | — | 10 dic 2025 | A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions. |
| CVE-2025-8485 | Alta (7) | 0.12% | — | 12 nov 2025 | An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application. |
| CVE-2025-10495 | Alta (7.7) | 0.21% | — | 12 nov 2025 | A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical… |
| CVE-2025-4657 | Alta (8.4) | 0.16% | — | 17 jul 2025 | A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated… |
| CVE-2024-10254 | Media (4.7) | 0.13% | — | 14 ene 2025 | A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash. |
| CVE-2024-10253 | Media (4.7) | 0.12% | — | 14 ene 2025 | A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash. |
| CVE-2024-4130 | Alta (7.8) | 0.17% | — | 11 oct 2024 | A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. |
| CVE-2023-6450 | Media (5.5) | 0.16% | — | 19 ene 2024 | An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Lenovo
Xclarity Administrator · 28Thinkcentre M625q Firmware · 28Ideacentre G5-14imb05 Firmware · 27Thinkcentre M75n Firmware · 27V50t-13imb Firmware · 27Ideacentre Gaming 5-14iob6 Firmware · 27Ideacentre 5-14iob6 Firmware · 27Ideacentre Creator 5-14iob6 Firmware · 26Thinkcentre M75t GEN 2 Firmware · 26V30a-22iml Firmware · 26Ideacentre C5-14imb05 Firmware · 26Ideacentre 3-07imb05 Firmware · 26