7.7
High
CVE-2025-10495 A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion…
Description
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| App Store 9.0 | earliest → < 9.0.2530.1027 | 9.0.2530.1027 |
| PC Manager 5.1 | earliest → < 5.1.140.9262 | 5.1.140.9262 |
| Browser 9.0 | earliest → < 9.0.6.9111 | 9.0.6.9111 |
| Legion Zone 2.0 | earliest → < 2.0.21 | 2.0.21 |
Other CVEs of App Store
The 11 CVEs of App Store →
CVE-2026-13104
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could…
7.0
High
CVE-2026-13103
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese…
7.0
High
CVE-2026-9046
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows…
7.3
High
CVE-2025-12046
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a…
8.5
High