Lenovo App Store vulnerabilities
12 vulnerabilities
Known vulnerabilities in Lenovo App Store, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-4657lenovo · app_store +2 morelenovo app_storeA buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.EPSS0.18%HighCVE-2025-10495lenovo · app_store +3 morelenovo app_storeA potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.EPSS0.22%HighCVE-2025-12046lenovo · app_store +1 morelenovo app_storeA DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.EPSS0.14%HighCVE-2025-8485lenovo · app_storelenovo app_storeAn improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.EPSS0.13%HighCVE-2022-3611lenovo · app_store +1 morelenovo app_storeAn information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications.EPSS0.41%HighCVE-2024-4130lenovo · app_storelenovo app_storeA DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges.EPSS0.17%MediumCVE-2024-10254lenovo · app_store +2 morelenovo app_storeA potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.EPSS0.13%MediumCVE-2024-10253lenovo · app_store +2 morelenovo app_storeA potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.EPSS0.13%HighCVE-2026-13103lenovo · app_storelenovo app_storeA potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code.EPSS0.18%HighCVE-2026-13104lenovo · app_storelenovo app_storeA potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.EPSS0.17%HighCVE-2026-9046lenovo · app_store +1 morelenovo app_storeA potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.EPSS0.13%MediumCVE-2023-6450lenovo · app_store +1 morelenovo app_storeAn incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service.EPSS0.16%