Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo App Store 9.0.2530.1027 Clear all filters
TI-2025-09622 CVE-2025-10495 · GHSA-v6gr-9fpj-mghv

Improper certificate validation in Lenovo App Store

Priority LOW 35

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical ne…

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00225 Published 2025-11-12 Fixed in 9.0.2530.1027, 5.1.140.9262 +2 CWE-295
TI-2025-07766 CVE-2025-8485 · GHSA-9j2g-7v4v-vp2g

Incorrect default permissions in Lenovo App Store

Priority LOW 32

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00131 Published 2025-11-12 Fixed in 9.0.2530.1027 CWE-276