7.3
High
CVE-2026-6090 A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local…
Description
A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Smart Connect 09.0 | earliest → < 09.0.2.003.000 | 09.0.2.003.000 |
Other CVEs of Smart Connect
The 4 CVEs of Smart Connect →
CVE-2026-6511
During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart…
6.8
Medium
CVE-2026-1653
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that…
6.8
Medium
CVE-2026-1652
A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could…
6.9
Medium