LE
Vendor
Lenovo
7,220
CVEs
1
On KEV
85
New 30D
Products
IT6.8
Idea Tab Pro TB373FU
Lenovo
4 CVEs0 on KEV2 new
TE6.8
Tab Extreme TB570ZU TB570FU
Lenovo
4 CVEs0 on KEV2 new
TK6.8
Tab K9 TB305FU
Lenovo
4 CVEs0 on KEV2 new
TK6.8
Tab K9 TB305XU
Lenovo
4 CVEs0 on KEV2 new
TM6.8
Tab M10 5G TB360ZU
Lenovo
4 CVEs0 on KEV2 new
YT6.8
Yoga Tab Plus TB520FU
Lenovo
4 CVEs0 on KEV2 new
TK6.8
Tab K11 TB330FUP
Lenovo
3 CVEs0 on KEV2 new
TK6.8
Tab K11 TB330XUP
Lenovo
3 CVEs0 on KEV2 new
TP6.8
Tab P12 TB370FU
Lenovo
3 CVEs0 on KEV2 new
TP6.8
Tab Plus TB351FU
Lenovo
3 CVEs0 on KEV2 new
IT6.8
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)
Lenovo
2 CVEs0 on KEV2 new
IT6.8
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)
Lenovo
2 CVEs0 on KEV2 new
IT6.8
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)
Lenovo
2 CVEs0 on KEV2 new
LT6.8
Legion Tab (8.8", 3) (TB321FU)
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera C33
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera C33 Pro
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera C35
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera C5X
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera RQ3
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera X6Q
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera X6T
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera X9T
Lenovo
2 CVEs0 on KEV2 new
SC5.3
Smart Camera XW1
Lenovo
2 CVEs0 on KEV2 new
SN5.3
Smart Network PTZ X5E
Lenovo
2 CVEs0 on KEV2 new
SN5.3
Smart Network PTZ X5Q
Lenovo
2 CVEs0 on KEV2 new
SN5.3
Smart Network PTZ X5T
Lenovo
2 CVEs0 on KEV2 new
TE6.8
Tab Extreme (TB570FU)
Lenovo
2 CVEs0 on KEV2 new
TK6.8
Tab K11 Plus LTE ROW (TB352XU)
Lenovo
2 CVEs0 on KEV2 new
TK6.8
Tab K11 Plus (TB352FU)
Lenovo
2 CVEs0 on KEV2 new
TK6.8
Tab K11 Plus (TB352XU)
Lenovo
2 CVEs0 on KEV2 new
TK6.8
Tab K11 Plus WIFI ROW: TB352FU
Lenovo
2 CVEs0 on KEV2 new
TM6.8
Tab M11 (TB330FU)
Lenovo
2 CVEs0 on KEV2 new
TM6.8
Tab M11 (TB330XU)
Lenovo
2 CVEs0 on KEV2 new
TO6.8
Tab One (TB305FU)
Lenovo
2 CVEs0 on KEV2 new
TO6.8
Tab One (TB305XU)
Lenovo
2 CVEs0 on KEV2 new
TW6.8
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)
Lenovo
2 CVEs0 on KEV2 new
TW6.8
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)
Lenovo
2 CVEs0 on KEV2 new
YT6.8
Yoga Tab (TB710FU)
Lenovo
2 CVEs0 on KEV2 new
TM6.8
Tab M11 TB330FU TB330XU
Lenovo
3 CVEs0 on KEV1 new
TP6.8
Tab P12 TB370FU TB372FU
Lenovo
2 CVEs0 on KEV1 new
TP6.8
Tab P12 TB372FU
Lenovo
2 CVEs0 on KEV1 new
BP7.3
Baiying PC Client
Lenovo
1 CVEs0 on KEV1 new
EM5.5
Energy Management Driver
Lenovo
1 CVEs0 on KEV1 new
LZ8.0
Legion Zone Application
Lenovo
1 CVEs0 on KEV1 new
LT6.4
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
Lenovo
1 CVEs0 on KEV1 new
TE6.8
Tab Extreme (TB570ZU)
Lenovo
1 CVEs0 on KEV1 new
TW6.8
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
Lenovo
1 CVEs0 on KEV1 new
SV9.8
Storage V5030 Firmware
Lenovo
1 CVEs1 on KEV0 new
XA9.8
XClarity Administrator
Lenovo
29 CVEs0 on KEV0 new
IG7.8
Ideacentre Gaming 5-14iob6 Firmware
Lenovo
27 CVEs0 on KEV0 new
TM9.8
Thinkcentre M625q Firmware
Lenovo
27 CVEs0 on KEV0 new
TM7.8
Thinkcentre M75n Firmware
Lenovo
27 CVEs0 on KEV0 new
I37.8
Ideacentre 3-07imb05 Firmware
Lenovo
26 CVEs0 on KEV0 new
IC7.8
Ideacentre C5-14imb05 Firmware
Lenovo
26 CVEs0 on KEV0 new
LT7.8
Legion T7-34imz5 Firmware
Lenovo
25 CVEs0 on KEV0 new
TM7.8
Thinkcentre M70c Firmware
Lenovo
25 CVEs0 on KEV0 new
TM7.8
Thinkcentre M70q Firmware
Lenovo
25 CVEs0 on KEV0 new
TM7.8
Thinkcentre M75t Gen 2 Firmware
Lenovo
25 CVEs0 on KEV0 new
TM6.8
Thinkcentre M630e Firmware
Lenovo
24 CVEs0 on KEV0 new
TM7.8
Thinkcentre M75s Gen 2 Firmware
Lenovo
24 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92777 | TK Tab K9 (TB305XU) Lenovo | 6.4 | Oct 15 | A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary… |
| CVE-2026-92629 | BP Baiying PC Client Lenovo | 7.3 | Oct 15 | A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated… |
| CVE-2026-89062 | EM Energy Management Driver Lenovo | 5.5 | Oct 15 | A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error |
| CVE-2026-89057 | IT Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) Lenovo | 6.8 | Oct 15 | A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access |
| CVE-2026-75941 | LZ Legion Zone Application Lenovo | 8.0 | Oct 15 | A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical… |
| CVE-2026-16755 | SC Smart Camera XW1 Lenovo | 5.3 | Oct 15 | A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose… |
| CVE-2026-16754 | SN Smart Network PTZ X5E Lenovo | 4.8 | Oct 15 | A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user… |
| CVE-2026-11813 | FC FileZ Client Lenovo | 7.8 | Sep 10 | A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges |
| CVE-2026-18994 | FM File Manager Application Lenovo | 7.1 | Sep 10 | A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a… |
| CVE-2026-19136 | TA Tianxi AI Agent PC Application Lenovo | 7.8 | Sep 10 | A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system… |
| CVE-2026-63427 | SF Software Fix Lenovo | 7.8 | Sep 10 | An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated… |
| CVE-2026-75940 | HA Health Application Lenovo | 9.1 | Sep 10 | A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related… |
| CVE-2026-14256 | LG L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) ELAN TrackPoint Driver for Windows 11 (Version 23H2 or later) - ThinkPad L14 Gen 6 (Type 21S8, 21S9), L16 Gen 2 (Type 21SC, 21SD) Lenovo | 4.7 | Aug 13 | ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a… |
| CVE-2026-15994 | VA Vantage Lenovo | 7.0 | Aug 13 | During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local… |
| CVE-2026-63423 | AA Accessories and Display Manager Lenovo | 7.8 | Aug 13 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local… |
| CVE-2026-63424 | DM Dock Manager Lenovo | 7.3 | Aug 13 | During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges |
| CVE-2026-63425 | DM Dock Manager Lenovo | 7.8 | Aug 13 | During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute… |
| CVE-2026-63426 | DM Dock Manager Lenovo | 7.1 | Aug 13 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file… |
| CVE-2026-12036 | VA Vantage Lenovo | 7.1 | Aug 13 | An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to… |
| CVE-2026-6387 | SU System Update Lenovo | 7.0 | Aug 13 | A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges |
| CVE-2026-16793 | XO XClarity Orchestrator Lenovo | 8.8 | Aug 4 | Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator |
| CVE-2026-16792 | XO XClarity Orchestrator Lenovo | 6.1 | Aug 4 | Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator |
| CVE-2026-16791 | XE XClarity Essentials OneCLI Lenovo | 3.9 | Aug 4 | Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI |
| CVE-2026-10590 | L5 Legion 5 15AHP10 BIOS Lenovo | 4.4 | Jul 16 | A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler |
| CVE-2026-10589 | LP Legion Pro 5 16IAX10 BIOS Lenovo | 6.0 | Jul 16 | A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode |
| CVE-2026-10588 | L5 Legion 5 15APH9 BIOS Lenovo | 4.4 | Jul 16 | A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory |
| CVE-2026-10587 | IP IdeaPad Pro 5 16IAH10 BIOS Lenovo | 6.0 | Jul 16 | A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode |
| CVE-2026-14371 | XI XClarity Integrator for Microsoft Windows Admin Center Lenovo | 8.8 | Jul 16 | The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing… |
| CVE-2026-13104 | AS App Store Lenovo | 7.3 | Jul 16 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code… |
| CVE-2026-13103 | AS App Store Lenovo | 7.3 | Jul 16 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute… |
| CVE-2026-9046 | AS App Store Lenovo | 7.0 | Jul 16 | A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when… |
| CVE-2026-6511 | SC Smart Connect Lenovo | 5.5 | Jul 16 | During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated… |
| CVE-2025-10238 | TG T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS Lenovo | 6.7 | Jun 10 | During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to… |
| CVE-2025-10237 | PG P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS Lenovo | 6.7 | Jun 10 | During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform… |
| CVE-2026-6090 | SC Smart Connect Lenovo | 7.0 | Jun 10 | A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges |
| CVE-2026-8637 | LC LanSchool Classic Lenovo | 7.8 | Jun 10 | A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code… |
| CVE-2026-9045 | AA Accessories and Display Manager for Enterprise Lenovo | 7.8 | Jun 10 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local… |
| CVE-2026-7516 | AP Application Lenovo | 4.3 | Jun 10 | A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in… |
| CVE-2026-6282 | HS Home Storage Hub X20 Lenovo | 8.1 | May 13 | A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access… |
| CVE-2026-6281 | HS Home Storage Hub X20 Lenovo | 8.8 | May 13 | A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary… |
| CVE-2026-4145 | SF Software Fix Lenovo | 7.8 | Apr 15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code… |
| CVE-2026-4135 | SF Software Fix Lenovo | 6.6 | Apr 15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform… |
| CVE-2026-4134 | SF Software Fix Lenovo | 7.3 | Apr 15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute… |
| CVE-2026-1636 | SB Service Bridge Lenovo | 6.7 | Apr 15 | A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated… |
| CVE-2026-0827 | VA Vantage Lenovo | 7.1 | Apr 15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation… |
| CVE-2026-2640 | PM PC Manager Lenovo | 5.5 | Mar 11 | During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes |
| CVE-2026-1717 | VA Vantage Lenovo | 5.5 | Mar 11 | An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to… |
| CVE-2026-1716 | BA Baiying Lenovo | 7.1 | Mar 11 | An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete… |
| CVE-2026-1715 | VA Vantage Lenovo | 7.1 | Mar 11 | An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify… |
| CVE-2026-1653 | SC Smart Connect Lenovo | 5.5 | Mar 11 | A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue… |
| CVE-2026-1652 | SC Smart Connect Lenovo | 6.1 | Mar 11 | A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and… |
| CVE-2026-0940 | TP ThinkPad P15v Gen 3 BIOS Lenovo | 6.7 | Mar 11 | A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code |
| CVE-2026-2368 | FI FileZ Lenovo | 7.1 | Mar 11 | An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary… |
| CVE-2026-1068 | FI FileZ Lenovo | 5.3 | Mar 11 | An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive… |
| CVE-2026-0520 | FI FileZ Lenovo | 2.8 | Mar 11 | A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive… |
| CVE-2025-14058 | LT Lenovo Tab with Clear Case TB311FU Lenovo | 3.2 | Jan 14 | A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings… |
| CVE-2026-0421 | TL ThinkPad L16 Gen 2 BIOS Lenovo | 6.5 | Jan 14 | A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when… |
| CVE-2025-13455 | TT ThinkPlus TSD303 Lenovo | 7.8 | Jan 14 | A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted… |
| CVE-2025-13454 | TF ThinkPlus FU200 Lenovo | 5.5 | Jan 14 | A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information |
| CVE-2025-13453 | TT ThinkPlus TSD303 Lenovo | 4.6 | Jan 14 | A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive |
