Lenovo
Lenovo APP Store: vulnerabilities and CVEs
Lenovo APP Store has 11 published vulnerabilities, 6 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs11
Last 12 months6
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9046 | High (7.3) | 0.13% | — | Jul 16, 2026 | A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition,… |
| CVE-2026-13104 | High (7) | 0.17% | — | Jul 16, 2026 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
| CVE-2026-13103 | High (7) | 0.18% | — | Jul 16, 2026 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code. |
| CVE-2025-12046 | High (8.5) | 0.14% | — | Dec 10, 2025 | A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions. |
| CVE-2025-8485 | High (7) | 0.12% | — | Nov 12, 2025 | An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application. |
| CVE-2025-10495 | High (7.7) | 0.21% | — | Nov 12, 2025 | A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical… |
| CVE-2025-4657 | High (8.4) | 0.16% | — | Jul 17, 2025 | A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated… |
| CVE-2024-10254 | Medium (4.7) | 0.13% | — | Jan 14, 2025 | A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash. |
| CVE-2024-10253 | Medium (4.7) | 0.12% | — | Jan 14, 2025 | A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash. |
| CVE-2024-4130 | High (7.8) | 0.17% | — | Oct 11, 2024 | A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. |
| CVE-2023-6450 | Medium (5.5) | 0.16% | — | Jan 19, 2024 | An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service. |
Other products by Lenovo
Xclarity Administrator · 28Thinkcentre M625q Firmware · 28Ideacentre G5-14imb05 Firmware · 27Thinkcentre M75n Firmware · 27V50t-13imb Firmware · 27Ideacentre Gaming 5-14iob6 Firmware · 27Ideacentre 5-14iob6 Firmware · 27Ideacentre Creator 5-14iob6 Firmware · 26Thinkcentre M75t GEN 2 Firmware · 26V30a-22iml Firmware · 26Ideacentre C5-14imb05 Firmware · 26Ideacentre 3-07imb05 Firmware · 26