Login Request a demo
High severity · published Nov 12, 2025
CVE-2025-10495
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could…
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
App Store · Lenovo
before 9.0.2530.1027 · source: vendor
BR
Browser · Lenovo
before 9.0.6.9111 · source: vendor
LZ
Legion Zone · Lenovo
before 2.0.21 · source: vendor
PM
PC Manager · Lenovo
before 5.1.140.9262 · source: vendor
Affected product
AS
App Store
Lenovo
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-10495
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-10495
iknow.lenovo.com.cn
https://iknow.lenovo.com.cn/detail/434328
More from App Store
7.8
CVE-2025-12046
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated…
7.8
CVE-2024-4130
A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges
7.3
CVE-2026-13104
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code…
7.3
CVE-2026-13103
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute…
7.3
CVE-2025-8485
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of…