Skip to content

Known vulnerabilities in Lenovo Vantage

Is your version affected?

CVE Summary Score Published
CVE-2026-15994 During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and… 7.3 High Aug 13, 2026
CVE-2026-12036 An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial… 6.9 Medium Aug 13, 2026
CVE-2026-0827 During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the… 6.9 Medium Apr 15, 2026
CVE-2026-1717 An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo… 6.8 Medium Mar 11, 2026
CVE-2026-1716 An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo… 6.9 Medium Mar 11, 2026
CVE-2026-1715 An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo… 6.9 Medium Mar 11, 2026
CVE-2025-13154 An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow… 6.8 Medium Jan 14, 2026
CVE-2025-6232 An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local… 8.5 High Jul 17, 2025
CVE-2025-6231 An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local… 8.5 High Jul 17, 2025
CVE-2025-6230 A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local… 4.8 Medium Jul 17, 2025
CVE-2024-12673 An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook… 7.8 High Feb 12, 2025
CVE-2023-6044 A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical… 6.3 Medium Jan 19, 2024
CVE-2023-6043 A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass… 7.8 High Jan 19, 2024
CVE-2020-8327 A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation… 7.3 High Apr 14, 2020
CVE-2020-8316 A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to… 4.4 Medium Apr 14, 2020

Other Lenovo products