6.9
Moyenne
CVE-2026-12036 An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial…
Description
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Vantage 1.1 | premières → < 1.1.0.51 | 1.1.0.51 |
Autres CVE de Vantage
Les 15 CVE de Vantage →
CVE-2026-15994
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and…
7.3
Élevée
CVE-2026-0827
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the…
6.9
Moyenne
CVE-2026-1717
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo…
6.8
Moyenne
CVE-2026-1716
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo…
6.9
Moyenne