7.1
High
CVE-2025-6248 A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an attacker to obtain…
Description
A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an attacker to obtain sensitive information if a user visits a web page with specially crafted content.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Browser | Versions not published |
Other CVEs of Browser
The 7 CVEs of Browser →
CVE-2025-12046
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a…
8.5
High
CVE-2025-10495
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion…
7.7
High
CVE-2025-9201
A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that…
8.5
High
CVE-2025-4657
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in…
8.4
High