An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
CVE-2025-13155 is a high-severity vulnerability in the Lenovo Baiying Client caused by incorrect default permissions. It allows a local authenticated user to execute code with elevated privileges without requiring user interaction. The vulnerability stems from improper permission settings (CWE-276), enabling privilege escalation on affected systems. Although no exploits are currently known in the wild, the CVSS 8.5 score indicates a significant risk. This issue primarily affects local users who already have some access but can leverage this flaw to gain higher privileges. European organizations using Lenovo Baiying Client should be vigilant, especially in sectors with sensitive data or critical infrastructure. Mitigation involves auditing and correcting file and resource permissions, applying vendor patches once available, and restricting local user privileges. Countries with high Lenovo market penetration and strategic industries, such as Germany, France, and the UK, are most likely to be impacted. Immediate action is recommended to prevent potential exploitation and privilege escalation attacks.
CVE-2025-13152 is a high-severity DLL hijacking vulnerability in Lenovo One Client that allows a local authenticated user to execute code with elevated privileges. The flaw arises from an uncontrolled search path element, enabling attackers to load malicious DLLs. Exploitation requires local access and no user interaction, but no known exploits are currently in the wild. The vulnerability impacts confidentiality, integrity, and availability due to privilege escalation potential. European organizations using Lenovo One Client are at risk, especially in countries with high Lenovo market penetration and critical infrastructure reliance on this software. Mitigation involves applying vendor patches once available, restricting local user permissions, and monitoring for suspicious DLL loads. Given the CVSS 8.5 score, this vulnerability demands prompt attention to prevent potential lateral movement or system compromise. No authentication bypass or remote exploitation is possible, but the elevated privileges gained can lead to significant damage.
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.
An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the affected system.
A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application.
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.
A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.
An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data.
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:
An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.
A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.
