App Store (Lenovo) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-07-16. Vendor: Lenovo.
CVEs of App Store
- CVE-2026-13104 - CVSS 7.3 (high), 2026-07-16: A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to…
- CVE-2026-13103 - CVSS 7.3 (high), 2026-07-16: A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local…
- CVE-2026-9046 - CVSS 7.3 (high), 2026-07-16: A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the…
- CVE-2025-12046 - CVSS 8.5 (high), 2025-12-10: A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code…
- CVE-2025-8485 - CVSS 7.3 (high), 2025-11-12: An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges…
- CVE-2025-10495 - CVSS 7.7 (high), 2025-11-12: A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under…
- CVE-2025-4657 - CVSS 8.4 (high), 2025-07-17: A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and…
- CVE-2024-10254 - CVSS 4.7 (medium), 2025-01-14: A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system…
- CVE-2024-10253 - CVSS 4.7 (medium), 2025-01-14: A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.
- CVE-2024-4130 - CVSS 7.8 (high), 2024-10-11: A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges.
- CVE-2023-6450 - CVSS 5.5 (medium), 2024-01-19: An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of…
- CVE-2022-3611 - CVSS 7.6 (high), 2023-10-27: An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive…
