6.8
Medium
CVE-2026-6511 During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart…
Description
During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Smart Connect 09.0 | earliest → < 09.0.2.003.000 | 09.0.2.003.000 |
Other CVEs of Smart Connect
The 4 CVEs of Smart Connect →
CVE-2026-6090
A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local…
7.3
High
CVE-2026-1653
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that…
6.8
Medium
CVE-2026-1652
A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could…
6.9
Medium