AS
Product
App Store
8
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 0
Watch
Add App Store to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-12046 | 7.8 | Dec 10 | A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated… Affected: before 9.0.2530.1027 |
| CVE-2024-4130 | 7.8 | Oct 11 | A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges Affected: before 9.0.17 |
| CVE-2025-10495 | 7.5 | Nov 12 | A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could… Affected: before 9.0.2530.1027 |
| CVE-2026-13104 | 7.3 | Jul 16 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code… Affected: before 9.0.2930.0514 |
| CVE-2026-13103 | 7.3 | Jul 16 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute… Affected: before 9.0.2930.0514 |
| CVE-2025-8485 | 7.3 | Nov 12 | An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of… Affected: before 9.0.2530.1027 |
| CVE-2026-9046 | 7.0 | Jul 16 | A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when… Affected: before 9.0.29 |
| CVE-2023-6450 | 5.5 | Jan 19 | An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service Affected: before 12.4.20 |
Showing 8