Filez Client (Lenovo) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-10. Vendor: Lenovo.

CVEs of Filez Client

• CVE-2026-11813 - CVSS 8.5 (high), 2026-09-10: A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate…
• CVE-2025-6249 - CVSS 8.4 (high), 2025-07-17: An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to…
• CVE-2025-2070 - CVSS 5.1 (medium), 2025-04-25: An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a…
• CVE-2025-2069 - CVSS 5.1 (medium), 2025-04-25: A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.
• CVE-2025-2068 - CVSS 5.1 (medium), 2025-04-25: An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.
• CVE-2024-8058 - CVSS 7.6 (high), 2024-12-16: An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the…