Login Request a demo
LE
Vendor
Lenovo
2,014 products with CVEs on record
6,177
CVEs
1
On KEV
85
New 30D
Products
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)
Lenovo
6.8
2 CVEs0 on KEV2 new
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)
Lenovo
6.8
2 CVEs0 on KEV2 new
IT
Idea Tab Pro (TB373FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
LT
Legion Tab (8.8", 3) (TB321FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
SC
Smart Camera C33
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera C33 Pro
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera C35
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera C5X
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera RQ3
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera X6Q
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera X6T
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera X9T
Lenovo
5.3
2 CVEs0 on KEV2 new
SC
Smart Camera XW1
Lenovo
5.3
2 CVEs0 on KEV2 new
SN
Smart Network PTZ X5E
Lenovo
5.3
2 CVEs0 on KEV2 new
SN
Smart Network PTZ X5Q
Lenovo
5.3
2 CVEs0 on KEV2 new
SN
Smart Network PTZ X5T
Lenovo
5.3
2 CVEs0 on KEV2 new
TE
Tab Extreme (TB570FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TE
Tab Extreme (TB570ZU/TB570FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K11 Plus LTE ROW (TB352XU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K11 Plus (TB352FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K11 Plus (TB352XU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K11 Plus WIFI ROW: TB352FU
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K11 (TB330FUP)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K11 (TB330XUP)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K9 (TB305FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TK
Tab K9 (TB305XU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TM
Tab M10 5G (TB360ZU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TM
Tab M11 (TB330FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TM
Tab M11 (TB330XU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TO
Tab One (TB305FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TO
Tab One (TB305XU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TP
Tab P12 (TB370FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TP
Tab Plus (TB351FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TW
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
TW
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)
Lenovo
6.8
2 CVEs0 on KEV2 new
YT
Yoga Tab Plus (TB520FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
YT
Yoga Tab (TB710FU)
Lenovo
6.8
2 CVEs0 on KEV2 new
BP
Baiying PC Client
Lenovo
7.3
1 CVEs0 on KEV1 new
EM
Energy Management Driver
Lenovo
5.5
1 CVEs0 on KEV1 new
LZ
Legion Zone Application
Lenovo
8.0
1 CVEs0 on KEV1 new
LT
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
Lenovo
6.4
1 CVEs0 on KEV1 new
TE
Tab Extreme (TB570ZU)
Lenovo
6.8
1 CVEs0 on KEV1 new
TM
Tab M11 (TB330FU/TB330XU)
Lenovo
6.8
1 CVEs0 on KEV1 new
TP
Tab P12 (TB370FU/TB372FU)
Lenovo
6.8
1 CVEs0 on KEV1 new
TP
Tab P12 (TB372FU)
Lenovo
6.8
1 CVEs0 on KEV1 new
TW
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
Lenovo
6.8
1 CVEs0 on KEV1 new
SV
Storage V5030 Firmware
Lenovo
9.8
1 CVEs1 on KEV0 new
IG
Ideacentre Gaming 5-14iob6 Firmware
Lenovo
7.8
27 CVEs0 on KEV0 new
TM
Thinkcentre M625q Firmware
Lenovo
9.8
27 CVEs0 on KEV0 new
TM
Thinkcentre M75n Firmware
Lenovo
7.8
27 CVEs0 on KEV0 new
XA
Xclarity Administrator
Lenovo
9.8
27 CVEs0 on KEV0 new
I3
Ideacentre 3-07imb05 Firmware
Lenovo
7.8
26 CVEs0 on KEV0 new
IC
Ideacentre C5-14imb05 Firmware
Lenovo
7.8
26 CVEs0 on KEV0 new
LT
Legion T7-34imz5 Firmware
Lenovo
7.8
25 CVEs0 on KEV0 new
TM
Thinkcentre M70c Firmware
Lenovo
7.8
25 CVEs0 on KEV0 new
TM
Thinkcentre M70q Firmware
Lenovo
7.8
25 CVEs0 on KEV0 new
TM
Thinkcentre M75t Gen 2 Firmware
Lenovo
7.8
25 CVEs0 on KEV0 new
TM
Thinkcentre M630e Firmware
Lenovo
6.8
24 CVEs0 on KEV0 new
TM
Thinkcentre M75s Gen 2 Firmware
Lenovo
7.8
24 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-92777
TP
Tab Plus (TB351FU)
Lenovo
6.4
0%
Oct 15A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary…
CVE-2026-92629
BP
Baiying PC Client
Lenovo
7.3
0%
Oct 15A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated…
CVE-2026-89062
EM
Energy Management Driver
Lenovo
5.5
0%
Oct 15A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error
CVE-2026-89057
YT
Yoga Tab Plus (TB520FU)
Lenovo
6.8
0%
Oct 15A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access
CVE-2026-75941
LZ
Legion Zone Application
Lenovo
8.0
0%
Oct 15A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical…
CVE-2026-16755
SC
Smart Camera C5X
Lenovo
5.3
0%
Oct 15A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose…
CVE-2026-16754
SC
Smart Camera X6Q
Lenovo
4.8
0%
Oct 15A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user…
CVE-2026-11813
FE
FileZ Enterprise
Lenovo
7.8
0%
Sep 10A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges
CVE-2026-18994
FM
File Manager Application
Lenovo
7.1
0%
Sep 10A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a…
CVE-2026-19136
TA
Tianxi AI Agent PC Application
Lenovo
7.8
1%
Sep 10A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system…
CVE-2026-63427
SF
Software Fix
Lenovo
7.8
0%
Sep 10An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated…
CVE-2026-75940
HA
Health Application
Lenovo
9.1
0%
Sep 10A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related…
CVE-2026-14256
LG
L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) ELAN TrackPoint Driver For Windows 11 (Version 23H2 or later) - ThinkPad L13 Gen 6 (Type 21RB, 21RC), L13 Gen 6 2-in-1 (Type 21RD, 21RE)
Lenovo
4.7
0%
Aug 13ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a…
CVE-2026-15994
CV
Commercial Vantage
Lenovo
7.0
0%
Aug 13During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local…
CVE-2026-63423
AA
Accessories and Display Manager
Lenovo
7.8
0%
Aug 13During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local…
CVE-2026-63424
DM
Dock Manager
Lenovo
7.3
0%
Aug 13During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges
CVE-2026-63425
DM
Dock Manager
Lenovo
7.8
0%
Aug 13During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute…
CVE-2026-63426
DM
Dock Manager
Lenovo
7.1
0%
Aug 13During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file…
CVE-2026-12036
VA
Vantage
Lenovo
7.1
0%
Aug 13An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to…
CVE-2026-6387
SU
System Update
Lenovo
7.0
0%
Aug 13A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges
CVE-2026-16793
XO
XClarity Orchestrator
Lenovo
8.8
1%
Aug 4Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
CVE-2026-16792
XO
XClarity Orchestrator
Lenovo
6.1
0%
Aug 4Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
CVE-2026-16791
XE
XClarity Essentials OneCLI
Lenovo
3.9
0%
Aug 4Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI
CVE-2026-10590
T1
ThinkBook 16p G6 IAX BIOS
Lenovo
4.4
0%
Jul 16A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler
CVE-2026-10589
LP
Legion Pro 7 16AFR10H BIOS
Lenovo
6.0
0%
Jul 16A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode
CVE-2026-10588
LP
Legion Pro 5 16IAX10 BIOS
Lenovo
4.4
0%
Jul 16A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory
CVE-2026-10587
Y9
Yoga 9 2-in-1 14IMH9 BIOS
Lenovo
6.0
0%
Jul 16A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode
CVE-2026-14371
XI
XClarity Integrator for Microsoft Windows Admin Center
Lenovo
8.8
1%
Jul 16The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing…
CVE-2026-13104
AS
App Store
Lenovo
7.3
0%
Jul 16A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code…
CVE-2026-13103
AS
App Store
Lenovo
7.3
0%
Jul 16A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute…
CVE-2026-9046
LZ
Legion Zone
Lenovo
7.0
0%
Jul 16A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when…
CVE-2026-6511
SC
Smart Connect
Lenovo
5.5
0%
Jul 16During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated…
CVE-2025-10238
XG
X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
Lenovo
6.7
0%
Jun 10During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to…
CVE-2025-10237
X2
X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS
Lenovo
6.7
0%
Jun 10During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform…
CVE-2026-6090
SC
Smart Connect
Lenovo
7.0
0%
Jun 10A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges
CVE-2026-8637
LC
LanSchool Classic
Lenovo
7.8
0%
Jun 10A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code…
CVE-2026-9045
AA
Accessories and Display Manager for Enterprise
Lenovo
7.8
0%
Jun 10During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local…
CVE-2026-7516
AP
Application
Lenovo
4.3
0%
Jun 10A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in…
CVE-2026-6282
PC
Personal Cloud X1s
Lenovo
8.1
0%
May 13A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access…
CVE-2026-6281
PC
Personal Cloud T2
Lenovo
8.8
0%
May 13A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary…
CVE-2026-4145
SF
Software Fix
Lenovo
7.8
0%
Apr 15During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code…
CVE-2026-4135
SF
Software Fix
Lenovo
6.6
0%
Apr 15During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform…
CVE-2026-4134
SF
Software Fix
Lenovo
7.3
0%
Apr 15During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute…
CVE-2026-1636
SB
Service Bridge
Lenovo
6.7
0%
Apr 15A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated…
CVE-2026-0827
VA
Vantage
Lenovo
7.1
0%
Apr 15During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation…
CVE-2026-2640
PC
Pcmanager
Lenovo
5.5
0%
Mar 11During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes
CVE-2026-2368
FI
Filez
Lenovo
7.1
0%
Mar 11An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary…
CVE-2026-1717
VA
Vantage
Lenovo
5.5
0%
Mar 11An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to…
CVE-2026-1716
VA
Vantage
Lenovo
7.1
0%
Mar 11An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete…
CVE-2026-1715
VA
Vantage
Lenovo
7.1
0%
Mar 11An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify…
CVE-2026-1653
SC
Smart Connect
Lenovo
5.5
0%
Mar 11A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue…
CVE-2026-1652
SC
Smart Connect
Lenovo
6.1
0%
Mar 11A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and…
CVE-2026-1068
FI
Filez
Lenovo
5.3
0%
Mar 11An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive…
CVE-2026-0520
FI
Filez
Lenovo
2.8
0%
Mar 11A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive…
CVE-2025-13455
TT
Thinkplus Tsd303 Firmware
Lenovo
7.8
0%
Jan 14A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted…
CVE-2025-13454
TF
Thinkplus Fu200 Firmware
Lenovo
5.5
0%
Jan 14A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information
CVE-2025-13453
TT
Thinkplus Tu800 Firmware
Lenovo
4.6
0%
Jan 14A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive
CVE-2025-8485
AS
App Store
Lenovo
7.3
0%
Nov 12An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of…
CVE-2025-8486
PC
Pcmanager
Lenovo
7.8
0%
Oct 15A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges
CVE-2025-10581
PC
Pcmanager
Lenovo
7.8
0%
Oct 15A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code…