Skip to content
Sign in
8.5 High

CVE-2025-12046 A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a…

Description

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.

Affected products and versions

Product Affected versions Fixed in
App Store 9.0 earliest → < 9.0.2530.1027 9.0.2530.1027
Browser 9.0 earliest → < 9.0.6.11071 9.0.6.11071

Other CVEs of App Store

The 11 CVEs of App Store →
CVE-2026-13104 A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could… 7.0 High CVE-2026-13103 A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese… 7.0 High CVE-2026-9046 A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows… 7.3 High CVE-2025-10495 A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion… 7.7 High
Track this CVE