- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 134 analyzed records
As of 09/11/2026, Lenovo recorded 25 security vulnerabilities in the last 90 days across 75 products, including 16 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, IdeaPad Pro 5 16AGP11 BIOS had the most security vulnerabilities in the Lenovo ecosystem, with 4 vulnerabilities—approximately 16% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-11813CVE-2026-11813 | Exploitation statusNot confirmed | FixYes | Affected productFileZ Client | Published09/10/2026 | SeverityHigh |
CVE-2026-18994CVE-2026-18994 | Exploitation statusNot confirmed | FixYes | Affected productFile Manager Application | Published09/10/2026 | SeverityHigh |
CVE-2026-19136CVE-2026-19136 | Exploitation statusNot confirmed | FixYes | Affected productTianxi AI Agent PC Application | Published09/10/2026 | SeverityHigh |
CVE-2026-63427CVE-2026-63427 | Exploitation statusNot confirmed | FixYes | Affected productSoftware Fix | Published09/10/2026 | SeverityHigh |
CVE-2026-75940CVE-2026-75940 | Exploitation statusNot confirmed | FixYes | Affected productHealth Application | Published09/10/2026 | SeverityCritical |
CVE-2026-14256CVE-2026-14256 | Exploitation statusNot known exploited | FixYes | Affected productE16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad | Published08/13/2026 | SeverityMedium |
CVE-2026-15994CVE-2026-15994 | Exploitation statusNot known exploited | FixYes | Affected productCommercial Vantage | Published08/13/2026 | SeverityHigh |
CVE-2026-63423CVE-2026-63423 | Exploitation statusNot known exploited | FixYes | Affected productAccessories and Display Manager | Published08/13/2026 | SeverityHigh |
CVE-2026-63424CVE-2026-63424 | Exploitation statusNot known exploited | FixYes | Affected productDock Manager | Published08/13/2026 | SeverityHigh |
CVE-2026-63425CVE-2026-63425 | Exploitation statusNot known exploited | FixYes | Affected productDock Manager | Published08/13/2026 | SeverityHigh |
CVE-2026-63426CVE-2026-63426 | Exploitation statusNot known exploited | FixYes | Affected productDock Manager | Published08/13/2026 | SeverityMedium |
CVE-2026-12036CVE-2026-12036 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published08/13/2026 | SeverityMedium |
CVE-2026-6387CVE-2026-6387 | Exploitation statusNot known exploited | FixYes | Affected productSystem Update | Published08/13/2026 | SeverityHigh |
CVE-2026-16793Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator | Exploitation statusNot known exploited | FixYes | Affected productXClarity Orchestrator | Published08/04/2026 | SeverityHigh |
CVE-2026-16792Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator | Exploitation statusNot known exploited | FixYes | Affected productXClarity Orchestrator | Published08/04/2026 | SeverityHigh |
CVE-2026-16791Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI | Exploitation statusNot known exploited | FixYes | Affected productXClarity Essentials OneCLI | Published08/04/2026 | SeverityLow |
CVE-2026-10590CVE-2026-10590 | Exploitation statusNot known exploited | FixYes | Affected productYoga Pro 7 15IPH11 BIOS | Published07/16/2026 | SeverityMedium |
CVE-2026-10589CVE-2026-10589 | Exploitation statusNot known exploited | FixYes | Affected productYoga Pro 7 15IPH11 BIOS | Published07/16/2026 | SeverityMedium |
CVE-2026-10588CVE-2026-10588 | Exploitation statusNot known exploited | FixYes | Affected productYoga Pro 7 15IPH11 BIOS | Published07/16/2026 | SeverityMedium |
CVE-2026-10587CVE-2026-10587 | Exploitation statusNot known exploited | FixYes | Affected productYoga Pro 7 15IPH11 BIOS | Published07/16/2026 | SeverityMedium |
CVE-2026-14371CVE-2026-14371 | Exploitation statusNot known exploited | FixYes | Affected productXClarity Integrator for Microsoft Windows Admin Center | Published07/16/2026 | SeverityHigh |
CVE-2026-13104CVE-2026-13104 | Exploitation statusNot known exploited | FixYes | Affected productApp Store | Published07/16/2026 | SeverityHigh |
CVE-2026-13103CVE-2026-13103 | Exploitation statusNot known exploited | FixYes | Affected productApp Store | Published07/16/2026 | SeverityHigh |
CVE-2026-9046CVE-2026-9046 | Exploitation statusNot known exploited | FixYes | Affected productLegion Zone | Published07/16/2026 | SeverityHigh |
CVE-2026-6511CVE-2026-6511 | Exploitation statusNot known exploited | FixYes | Affected productSmart Connect | Published07/16/2026 | SeverityMedium |
CVE-2025-10238CVE-2025-10238 | Exploitation statusNot known exploited | FixYes | Affected productX13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS | Published06/10/2026 | SeverityHigh |
CVE-2025-10237CVE-2025-10237 | Exploitation statusNot known exploited | FixYes | Affected productX13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS | Published06/10/2026 | SeverityHigh |
CVE-2026-6090CVE-2026-6090 | Exploitation statusNot known exploited | FixYes | Affected productSmart Connect | Published06/10/2026 | SeverityHigh |
CVE-2026-8637CVE-2026-8637 | Exploitation statusNot known exploited | FixYes | Affected productLanSchool Classic | Published06/10/2026 | SeverityHigh |
CVE-2026-9045CVE-2026-9045 | Exploitation statusNot known exploited | FixYes | Affected productAccessories and Display Manager for Enterprise | Published06/10/2026 | SeverityHigh |
CVE-2026-7516CVE-2026-7516 | Exploitation statusNot known exploited | FixYes | Affected productApplication | Published06/10/2026 | SeverityMedium |
CVE-2026-6282CVE-2026-6282 | Exploitation statusNot known exploited | FixYes | Affected productPersonal Cloud T2s | Published05/13/2026 | SeverityHigh |
CVE-2026-6281CVE-2026-6281 | Exploitation statusNot known exploited | FixYes | Affected productPersonal Cloud T2s | Published05/13/2026 | SeverityHigh |
CVE-2026-4145CVE-2026-4145 | Exploitation statusNot known exploited | FixYes | Affected productSoftware Fix | Published04/15/2026 | SeverityHigh |
CVE-2026-4135CVE-2026-4135 | Exploitation statusNot known exploited | FixYes | Affected productSoftware Fix | Published04/15/2026 | SeverityMedium |
CVE-2026-4134CVE-2026-4134 | Exploitation statusNot known exploited | FixYes | Affected productSoftware Fix | Published04/15/2026 | SeverityHigh |
CVE-2026-1636CVE-2026-1636 | Exploitation statusNot known exploited | FixYes | Affected productService Bridge | Published04/15/2026 | SeverityMedium |
CVE-2026-0827CVE-2026-0827 | Exploitation statusNot known exploited | FixYes | Affected productDiagnostics | Published04/15/2026 | SeverityMedium |
CVE-2026-2640CVE-2026-2640 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published03/11/2026 | SeverityMedium |
CVE-2026-1717CVE-2026-1717 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published03/11/2026 | SeverityMedium |
CVE-2026-1716CVE-2026-1716 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published03/11/2026 | SeverityMedium |
CVE-2026-1715CVE-2026-1715 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published03/11/2026 | SeverityMedium |
CVE-2026-1653CVE-2026-1653 | Exploitation statusNot known exploited | FixYes | Affected productSmart Connect | Published03/11/2026 | SeverityMedium |
CVE-2026-1652CVE-2026-1652 | Exploitation statusNot known exploited | FixYes | Affected productSmart Connect | Published03/11/2026 | SeverityMedium |
CVE-2026-0940CVE-2026-0940 | Exploitation statusNot known exploited | FixYes | Affected productThinkPad T14 Gen 5 BIOS | Published03/11/2026 | SeverityHigh |
CVE-2026-2368CVE-2026-2368 | Exploitation statusNot known exploited | FixYes | Affected productFileZ | Published03/11/2026 | SeverityHigh |
CVE-2026-1068CVE-2026-1068 | Exploitation statusNot known exploited | FixYes | Affected productFileZ | Published03/11/2026 | SeverityMedium |
CVE-2026-0520CVE-2026-0520 | Exploitation statusNot known exploited | FixYes | Affected productFileZ | Published03/11/2026 | SeverityLow |
CVE-2025-14058CVE-2025-14058 | Exploitation statusNot known exploited | FixYes | Affected productTab M11 TB330FU TB330XU | Published01/14/2026 | SeverityLow |
CVE-2026-0421CVE-2026-0421 | Exploitation statusNot known exploited | FixYes | Affected productThinkPad L13 Gen 6 BIOS | Published01/14/2026 | SeverityHigh |
CVE-2025-13455CVE-2025-13455 | Exploitation statusNot known exploited | FixYes | Affected productThinkPlus FU100 | Published01/14/2026 | SeverityHigh |
CVE-2025-13454CVE-2025-13454 | Exploitation statusNot known exploited | FixYes | Affected productThinkPlus FU100 | Published01/14/2026 | SeverityMedium |
CVE-2025-13453CVE-2025-13453 | Exploitation statusNot known exploited | FixYes | Affected productThinkPlus FU100 | Published01/14/2026 | SeverityMedium |
CVE-2025-13154CVE-2025-13154 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published01/14/2026 | SeverityMedium |
CVE-2025-13155CVE-2025-13155 | Exploitation statusNot known exploited | FixYes | Affected productBaiying Client | Published12/10/2025 | SeverityHigh |
CVE-2025-13152CVE-2025-13152 | Exploitation statusNot known exploited | FixYes | Affected productOne Client | Published12/10/2025 | SeverityHigh |
CVE-2025-12046CVE-2025-12046 | Exploitation statusNot known exploited | FixYes | Affected productApp Store | Published12/10/2025 | SeverityHigh |
CVE-2025-12048CVE-2025-12048 | Exploitation statusNot known exploited | FixYes | Affected productScanner Pro | Published11/12/2025 | SeverityHigh |
CVE-2025-12047CVE-2025-12047 | Exploitation statusNot known exploited | FixYes | Affected productScanner Pro | Published11/12/2025 | SeverityMedium |
CVE-2025-10495CVE-2025-10495 | Exploitation statusNot known exploited | FixYes | Affected productApp Store | Published11/12/2025 | SeverityHigh |
CVE-2025-8485CVE-2025-8485 | Exploitation statusNot known exploited | FixYes | Affected productApp Store | Published11/12/2025 | SeverityHigh |
CVE-2025-8421CVE-2025-8421 | Exploitation statusNot known exploited | FixYes | Affected productDock Manager | Published11/12/2025 | SeverityMedium |
CVE-2025-11193CVE-2025-11193 | Exploitation statusNot known exploited | FixYes | Affected productTab M11 TB330FU TB330XU | Published11/03/2025 | SeverityMedium |
CVE-2025-10699CVE-2025-10699 | Exploitation statusNot known exploited | FixYes | Affected productLeCloud Client | Published10/15/2025 | SeverityMedium |
CVE-2025-10581CVE-2025-10581 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published10/15/2025 | SeverityHigh |
CVE-2025-9548CVE-2025-9548 | Exploitation statusNot known exploited | FixYes | Affected productPower Management driver | Published10/15/2025 | SeverityMedium |
CVE-2025-8486CVE-2025-8486 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published10/15/2025 | SeverityHigh |
CVE-2025-6026CVE-2025-6026 | Exploitation statusNot known exploited | FixYes | Affected productUniversal Device Client | Published10/15/2025 | SeverityLow |
CVE-2025-8061CVE-2025-8061 | Exploitation statusNot known exploited | FixYes | Affected productDispatcher 3.0 Driver | Published09/11/2025 | SeverityHigh |
CVE-2025-8557CVE-2025-8557 | Exploitation statusNot known exploited | FixYes | Affected productXClarity Orchestrator (LXCO) | Published09/11/2025 | SeverityHigh |
CVE-2025-9214CVE-2025-9214 | Exploitation statusNot known exploited | FixYes | Affected productLJ2206W Printer | Published09/11/2025 | SeverityMedium |
CVE-2025-9319CVE-2025-9319 | Exploitation statusNot known exploited | FixYes | Affected productWallpaper Client | Published09/11/2025 | SeverityHigh |
CVE-2025-9201CVE-2025-9201 | Exploitation statusNot known exploited | FixYes | Affected productBrowser | Published09/11/2025 | SeverityHigh |
CVE-2025-8098CVE-2025-8098 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published08/18/2025 | SeverityHigh |
CVE-2025-4371CVE-2025-4371 | Exploitation statusNot known exploited | FixYes | Affected product510 FHD Webcam | Published08/18/2025 | SeverityHigh |
CVE-2025-4657CVE-2025-4657 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published07/17/2025 | SeverityHigh |
CVE-2025-6249CVE-2025-6249 | Exploitation statusNot known exploited | FixYes | Affected productFileZ Client | Published07/17/2025 | SeverityHigh |
CVE-2025-6248CVE-2025-6248 | Exploitation statusNot known exploited | FixYes | Affected productBrowser | Published07/17/2025 | SeverityHigh |
CVE-2025-6232CVE-2025-6232 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published07/17/2025 | SeverityHigh |
CVE-2025-6231CVE-2025-6231 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published07/17/2025 | SeverityHigh |
CVE-2025-6230CVE-2025-6230 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published07/17/2025 | SeverityMedium |
CVE-2025-1729CVE-2025-1729 | Exploitation statusNot known exploited | FixYes | Affected productTrackPoint Quick Menu | Published07/17/2025 | SeverityMedium |
CVE-2025-0886CVE-2025-0886 | Exploitation statusNot known exploited | FixYes | Affected productElliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW) | Published07/17/2025 | SeverityHigh |
CVE-2025-2503CVE-2025-2503 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published05/30/2025 | SeverityMedium |
CVE-2025-2502CVE-2025-2502 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published05/30/2025 | SeverityHigh |
CVE-2025-2501CVE-2025-2501 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published05/30/2025 | SeverityHigh |
CVE-2025-1479CVE-2025-1479 | Exploitation statusNot known exploited | FixYes | Affected productLegion Space for Legion Go | Published05/30/2025 | SeverityMedium |
CVE-2024-11679CVE-2024-11679 | Exploitation statusNot known exploited | FixYes | Affected productSystem x3550 M5 | Published04/11/2025 | SeverityMedium |
CVE-2024-12673CVE-2024-12673 | Exploitation statusNot known exploited | FixYes | Affected productVantage | Published02/12/2025 | SeverityHigh |
CVE-2024-45102CVE-2024-45102 | Exploitation statusNot known exploited | FixYes | Affected productXClarity Administrator | Published01/14/2025 | SeverityMedium |
CVE-2024-10254CVE-2024-10254 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published01/14/2025 | SeverityMedium |
CVE-2024-10253CVE-2024-10253 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager | Published01/14/2025 | SeverityMedium |
CVE-2024-8058CVE-2024-8058 | Exploitation statusNot known exploited | FixYes | Affected productFileZ Client | Published12/16/2024 | SeverityHigh |
CVE-2024-6001CVE-2024-6001 | Exploitation statusNot known exploited | FixYes | Affected productAccessories and Display Manager | Published12/16/2024 | SeverityHigh |
CVE-2024-4762CVE-2024-4762 | Exploitation statusNot known exploited | FixYes | Affected productAccessories and Display Manager | Published12/16/2024 | SeverityHigh |
CVE-2024-33582CVE-2024-33582 | Exploitation statusNot known exploited | FixYes | Affected productService Framework | Published10/11/2024 | SeverityHigh |
CVE-2024-33581CVE-2024-33581 | Exploitation statusNot known exploited | FixYes | Affected productPC Manager AI intelligent scenario | Published10/11/2024 | SeverityHigh |
CVE-2024-33580CVE-2024-33580 | Exploitation statusNot known exploited | FixYes | Affected productPersonal Cloud | Published10/11/2024 | SeverityHigh |
CVE-2024-33579CVE-2024-33579 | Exploitation statusNot known exploited | FixYes | Affected productBaiying | Published10/11/2024 | SeverityHigh |
CVE-2024-33578CVE-2024-33578 | Exploitation statusNot known exploited | FixYes | Affected productLeyun | Published10/11/2024 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
%20Laptops%20(ThinkPad)%20ELAN%20TrackPoint%20Device%20Driver%20for%20Windows%2011%20(Version%2023H2%20or%20later)%20-%20ThinkPad.svg){kind=icon}
%20Laptops%20(ThinkPad)%20BIOS.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
