Threat database

CVE-2026-92777 is a medium severity vulnerability in Lenovo Idea Tab Pro (TB373FU) tablets. It involves the use of a default cryptographic key that could allow a user with physical access to an unlocked device to bypass protections and execute arbitrary code. The vulnerability affects multiple firmware versions prior to various 17.x.x.xxx releases. There are no known exploits in the wild and no official patch information provided.

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.

CVE-2026-89057 is a high-severity authentication bypass vulnerability affecting Lenovo Idea Tab Pro (TB373FU) tablets. It allows a user with physical access to bypass authentication and gain unauthorized access to the device. The vulnerability is identified as CWE-288, involving authentication bypass via an alternate path or channel. Multiple firmware versions prior to 17.5.10.362 are affected. No vendor patch or remediation details are provided in the available data.

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

CVE-2026-11813 is a high-severity vulnerability in the Lenovo FileZ Client application involving incorrect default permissions. This flaw could allow a local authenticated user to escalate their privileges on the affected system. The vulnerability affects versions prior to 11.7.1.0 and 11.5.1.0. No known exploits are reported in the wild, and no official patch information is provided in the available data.

CVE-2026-18994 is a high-severity vulnerability in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market. It involves improper authorization due to improper export of application components, allowing a local authenticated user to read or modify protected files within the app. The affected versions are all versions prior to 9.8.1.77. There is no information about an available patch or official fix at this time.

CVE-2026-19136 is a high-severity OS command injection vulnerability in the Lenovo Tianxi AI Agent PC Application, distributed exclusively in the Chinese market. It allows a local user to execute arbitrary operating system commands by opening a specially crafted link handled by the application. The vulnerability affects versions from 0 up to but not including 4.2.1.8111. No official patch information is provided in the input data.

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

CVE-2026-75940 is a critical vulnerability in the Lenovo Health Android Application distributed exclusively in the Chinese market. It involves the use of hard-coded credentials, which could allow an attacker to access sensitive health-related information without requiring user interaction or privileges. The affected versions range from 0 up to and including 1.5.0. The vulnerability has a high CVSS 4.0 base score of 9.3, indicating a severe risk. No patch or remediation details are currently provided by the vendor. There are no known exploits in the wild at this time.

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.