Lenovo 厂商相关 392 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
联想主要提供个人电脑、服务器及智能设备，其软件生态涵盖固件、BIOS及预装应用。历史漏洞多集中于远程代码执行、缓冲区溢出及权限提升，常源于固件更新机制或驱动组件缺陷。值得关注的是，其ThinkPad系列曾因固件安全机制被曝存在物理访问下的持久化风险，促使厂商强化签名验证与TPM集成。随着物联网设备普及，供应链攻击面扩大，持续的安全更新与透明披露成为其安全治理的关键环节。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-11813 | Lenovo Filez Client权限不当致本地权限提升 — FileZ Client CWE-276 | 7.8 | High | 2026-09-10 |
| CVE-2026-18994 | 联想文件管理器授权不当致本地文件读写 — File Manager Application CWE-926 | 7.1 | High | 2026-09-10 |
| CVE-2026-19136 | 天息AI智能体PC应用命令注入漏洞 — Tianxi AI Agent PC Application CWE-78 | 7.8 | High | 2026-09-10 |
| CVE-2026-63427 | Lenovo Software Fix 认证绕过致特权执行漏洞 — Software Fix CWE-290 | 7.8 | High | 2026-09-10 |
| CVE-2026-75940 | 联想健康App敏感健康信息泄露漏洞 — Health Application CWE-798 | 9.1 | Critical | 2026-09-10 |
| CVE-2026-14256 | Lenovo ELAN TrackPoint driver 缓冲区错误漏洞 — E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad CWE-125 | 4.7 | Medium | 2026-08-13 |
| CVE-2026-15994 | Lenovo Vantage 后置链接漏洞 — Commercial Vantage CWE-59 | 7.0 | High | 2026-08-13 |
| CVE-2026-63423 | Lenovo Accessories and Display Manager 加密问题漏洞 — Accessories and Display Manager CWE-321 | 7.8 | High | 2026-08-13 |
| CVE-2026-63424 | Lenovo Dock Manager 信任管理问题漏洞 — Dock Manager CWE-261 | 7.3 | High | 2026-08-13 |
| CVE-2026-63425 | Lenovo Dock Manager 权限许可和访问控制问题漏洞 — Dock Manager CWE-276 | 7.8 | High | 2026-08-13 |
| CVE-2026-63426 | Lenovo Dock Manager 后置链接漏洞 — Dock Manager CWE-59 | 7.1 | High | 2026-08-13 |
| CVE-2026-12036 | Lenovo Vantage 后置链接漏洞 — Vantage CWE-59 | 7.1 | High | 2026-08-13 |
| CVE-2026-6387 | Lenovo system update 授权问题漏洞 — System Update CWE-290 | 7.0 | High | 2026-08-13 |
| CVE-2026-16793 | Lenovo XClarity Orchestrator 输入验证错误漏洞 — XClarity Orchestrator CWE-78 | 8.8 | High | 2026-08-04 |
| CVE-2026-16792 | Lenovo XClarity Orchestrator 加密问题漏洞 — XClarity Orchestrator CWE-295 | 6.1 | Medium | 2026-08-04 |
| CVE-2026-16791 | Lenovo XClarity Essentials OneCLI 资源管理错误漏洞 — XClarity Essentials OneCLI CWE-377 | 3.9 | Low | 2026-08-04 |
| CVE-2026-10590 | Lenovo Yoga Pro 7 15IPH11 BIOS 安全漏洞 — Yoga Pro 7 15IPH11 BIOS | 4.4 | Medium | 2026-07-16 |
| CVE-2026-10589 | Lenovo BIOS 缓冲区错误漏洞 — Yoga Pro 7 15IPH11 BIOS | 6.0 | Medium | 2026-07-16 |
| CVE-2026-10588 | Lenovo Yoga Pro 7 15IPH11 BIOS 信息泄露漏洞 — Yoga Pro 7 15IPH11 BIOS | 4.4 | Medium | 2026-07-16 |
| CVE-2026-10587 | Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞 — Yoga Pro 7 15IPH11 BIOS | 6.0 | Medium | 2026-07-16 |
| CVE-2026-14371 | Lenovo XClarity Integrator for Microsoft Windows Admin Center 命令注入漏洞 — XClarity Integrator for Microsoft Windows Admin Center CWE-78 | - | - | 2026-07-16 |
| CVE-2026-13104 | Lenovo app store 权限许可和访问控制问题漏洞 — App Store CWE-250 | 7.3 | High | 2026-07-16 |
| CVE-2026-13103 | Lenovo app store 路径遍历漏洞 — App Store CWE-22 | 7.3 | High | 2026-07-16 |
| CVE-2026-9046 | Lenovo Legion Zone 权限许可和访问控制问题漏洞 — Legion Zone CWE-277 | 7.0 | High | 2026-07-16 |
| CVE-2026-6511 | Lenovo Smart Connect 授权问题漏洞 — Smart Connect CWE-306 | 5.5 | Medium | 2026-07-16 |
| CVE-2025-10238 | Lenovo ThinkPad 缓冲区错误漏洞 — X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS CWE-787 | 6.7 | Medium | 2026-06-10 |
| CVE-2025-10237 | Lenovo ThinkPad 加密问题漏洞 — X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS CWE-327 | 6.7 | Medium | 2026-06-10 |
| CVE-2026-6090 | Lenovo Smart Connect 安全漏洞 — Smart Connect CWE-290 | 7.0 | High | 2026-06-10 |
| CVE-2026-8637 | Lenovo LanSchool Classic 代码问题漏洞 — LanSchool Classic CWE-427 | 7.8 | High | 2026-06-10 |
| CVE-2026-9045 | Lenovo Accessories and Display Manager for Enterprise 访问控制错误漏洞 — Accessories and Display Manager for Enterprise CWE-306 | 7.8 | High | 2026-06-10 |
本页汇总了 Lenovo 厂商截至目前公开的全部 392 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。