CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

Score

CVSS 4.0 7.3 High

Status

Deferred - psirt@lenovo.com

Published

2026-07-16

Last modified

2026-07-16

Weaknesses

CWE-277

Affected products

• App Store (Lenovo)
• Legion Zone (Lenovo)

References

• https://iknow.lenovo.com.cn/detail/441420