| CVE-2025-8098 | ALTO7.8 | An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges. | 18/08/2025 |
| CVE-2025-6232 | ALTO7.8 | An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations. | 17/07/2025 |
| CVE-2025-6231 | ALTO7.8 | An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file. | 17/07/2025 |
| CVE-2025-6230 | MEDIO5.3 | A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands. | 17/07/2025 |
| CVE-2025-2503 | ALTO7.1 | An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user. | 30/05/2025 |
| CVE-2025-2502 | ALTO7.8 | An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. | 30/05/2025 |
| CVE-2025-2501 | ALTO7.8 | An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. | 30/05/2025 |
| CVE-2024-9046 | ALTO7.8 | A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated privileges. | 11/10/2024 |
| CVE-2024-5474 | MEDIO5.5 | A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by | 11/10/2024 |
| CVE-2024-4132 | ALTO7.8 | A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges. | 11/10/2024 |
| CVE-2024-4131 | ALTO7.8 | A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges. | 11/10/2024 |
| CVE-2024-4130 | ALTO7.8 | A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. | 11/10/2024 |
| CVE-2024-4089 | ALTO7.8 | A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges. | 11/10/2024 |
| CVE-2024-45104 | MEDIO6.5 | A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call. | 13/09/2024 |
| CVE-2024-45103 | MEDIO4.3 | A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges. | 13/09/2024 |
| CVE-2023-1577 | ALTO7.8 | A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges. | 31/07/2024 |
| CVE-2019-6198 | ALTO7.8 | A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. | 31/07/2024 |
| CVE-2019-6197 | ALTO7.8 | A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. | 31/07/2024 |
| CVE-2017-3772 | MEDIO5.5 | A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot. | 31/07/2024 |
| CVE-2023-6450 | MEDIO5.5 | An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service. | 19/01/2024 |