Lenovo vulnerabilities

529 vulnerabilities

Known vulnerabilities in Lenovo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3,161 products.

Products

50 of 3,161
6.4CVE-2026-92777lenovoidea tab/ lenovo tab k11 gen 2 (tb336fu)+26
EPSS score
0.22%
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.7.3CVE-2026-92629lenovobaiying pc client
EPSS score
0.10%
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.6.8CVE-2026-89062lenovoenergy management driver
EPSS score
0.09%
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.7CVE-2026-89057lenovoidea tab/ lenovo tab k11 gen 2 (tb336fu)+30
EPSS score
0.29%
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.8.6CVE-2026-75941lenovolegion zone application
EPSS score
0.26%
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.6CVE-2026-16755lenovosmart camera c33+11
EPSS score
0.16%
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.5.9CVE-2026-16754lenovosmart camera c33+11
EPSS score
0.07%
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.6.5CVE-2018-16097lenovolxci for microsoft system center+2
EPSS score
0.45%
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.7.8CVE-2018-16098lenovo group ltd.various thinkpad products+59
EPSS score
0.40%
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.8.1CVE-2018-16092lenovosystem_management_module_firmware+1
EPSS score
0.87%
In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file.8.1CVE-2018-16094lenovosystem_management_module_firmware+1
EPSS score
0.89%
In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.6.5CVE-2018-16093lenovolxci for vmware+1
EPSS score
0.73%
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.5.9CVE-2018-16095lenovosystem_management_module_firmware+1
EPSS score
0.92%
In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.8.5CVE-2018-16089lenovosystem_management_module_firmware+1
EPSS score
1.74%
In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is insufficiently sanitized, allowing post-authentication command injection on the SMM as the root user.6.1CVE-2018-16096lenovosystem_management_module_firmware+1
EPSS score
0.65%
In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.8.1CVE-2018-16091lenovosystem_management_module_firmware+1
EPSS score
0.57%
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows.7.5CVE-2018-16090lenovosystem_management_module_firmware+1
EPSS score
0.87%
In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.8.8CVE-2018-9082lenovo group ltdez media and backup center+22
EPSS score
0.72%
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their password and retain access to the user's account9.3CVE-2018-9083lenovosystem_management_module_firmware+1
EPSS score
1.07%
In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.9.3CVE-2018-9075lenovo group ltdez media and backup center+3
EPSS score
4.08%
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.