CVE-2025-10495

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.

Score

CVSS 4.0 7.7 High

Status

Deferred - psirt@lenovo.com

Published

2025-11-12

Last modified

2026-10-18

Weaknesses

CWE-295

Affected products

• App Store (Lenovo)
• Browser (Lenovo)
• Legion Zone (Lenovo)
• Pc Manager (Lenovo)

References

• https://iknow.lenovo.com.cn/detail/434328