VA
Product
Vantage
13
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 4Low 0
Watch
Add Vantage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6232 | 7.8 | Jul 17 | An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by… Affected: before 10.2501.20.0 |
| CVE-2025-6231 | 7.8 | Jul 17 | An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by… Affected: before 10.2501.20.0 |
| CVE-2023-6043 | 7.8 | Jan 19 | A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated… Affected: before 4.0.49.0 |
| CVE-2020-8327 | 7.8 | Apr 14 | A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that… Affected: before 10.2003.10.0 |
| CVE-2026-12036 | 7.1 | Aug 13 | An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to… Affected: before 1.1.0.51 |
| CVE-2026-0827 | 7.1 | Apr 15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation… Affected: before 4.7.1.4 |
| CVE-2026-1716 | 7.1 | Mar 11 | An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete… Affected: before 1.0.8.15 |
| CVE-2026-1715 | 7.1 | Mar 11 | An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify… Affected: before 1.0.8.15 |
| CVE-2026-15994 | 7.0 | Aug 13 | During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local… Affected: before 10.2606.12 |
| CVE-2023-6044 | 6.8 | Jan 19 | A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute… Affected: before 4.0.49.0 |
| CVE-2026-1717 | 5.5 | Mar 11 | An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to… Affected: before 1.0.0.138 |
| CVE-2025-6230 | 5.3 | Jul 17 | A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands Affected: before 10.2501.20.0 |
| CVE-2020-8316 | 4.4 | Apr 14 | A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to read files on the system with elevated privileges Affected: before 10.2003.10.0 |
Showing 13