Skip to content
Sign in
7.3 High

CVE-2026-9046 A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows…

Description

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
Legion Zone 2.0 earliest → < 2.0.26 2.0.26
App Store 9.0 earliest → < 9.0.29 9.0.29

Other CVEs of Legion Zone

The 2 CVEs of Legion Zone →
CVE-2025-10495 A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion… 7.7 High
Track this CVE