6.8
Moyenne
CVE-2025-13154 An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow…
Description
An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Vantage 1.1 | premières → < 1.1.0.1111 | 1.1.0.1111 |
Autres CVE de Vantage
Les 15 CVE de Vantage →
CVE-2026-15994
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and…
7.3
Élevée
CVE-2026-12036
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial…
6.9
Moyenne
CVE-2026-0827
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the…
6.9
Moyenne
CVE-2026-1717
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo…
6.8
Moyenne