Browse all 392 CVE security advisories affecting Lenovo. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Lenovo operates as a global technology manufacturer, primarily producing personal computers, servers, and mobile devices for enterprise and consumer markets. Its software ecosystem, including pre-installed utilities and firmware, has historically exhibited vulnerabilities such as remote code execution, cross-site scripting, and privilege escalation flaws within management interfaces. These weaknesses often stem from complex supply chain integrations and legacy codebases embedded in hardware. While the company maintains standard security protocols, past incidents have highlighted risks associated with third-party components and default configurations in diagnostic tools. The current record of 359 Common Vulnerabilities and Exposures reflects the broad attack surface inherent in its diverse hardware portfolio. Continuous patching and rigorous code audits remain critical for mitigating these persistent threats across its extensive product line.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-0636 | Lenovo Thin Installer 输入验证错误漏洞 — Thin Installer CWE-120 | 5.0 | Medium | 2022-04-22 |
| CVE-2022-0354 | Lenovo Vantage代码注入漏洞 — System Update | 7.3 | High | 2022-04-22 |
| CVE-2022-0192 | Lenovo PCManager 代码问题漏洞 — PCManager CWE-427 | 7.3 | High | 2022-04-22 |
| CVE-2021-4212 | Lenovo Notebook 输入验证错误漏洞 — BIOS CWE-20 | 6.7 | Medium | 2022-04-22 |
| CVE-2021-4211 | Intel Processors 输入验证错误漏洞 — BIOS CWE-20 | 6.7 | Medium | 2022-04-22 |
| CVE-2021-4210 | Intel Processors 安全漏洞 — BIOS CWE-20 | 6.7 | Medium | 2022-04-22 |
| CVE-2021-3972 | Lenovo Notebook 安全漏洞 — Notebook BIOS CWE-489 | 6.7 | Medium | 2022-04-22 |
| CVE-2021-3971 | Lenovo Notebook 安全漏洞 — Notebook BIOS CWE-489 | 6.7 | Medium | 2022-04-22 |
| CVE-2021-3970 | Lenovo Notebook 输入验证错误漏洞 — Notebook BIOS CWE-20 | 6.7 | Medium | 2022-04-22 |
| CVE-2021-3722 | Lenovo Pcmanager 安全漏洞 — PCManager CWE-276 | 5.0 | Medium | 2022-04-22 |
| CVE-2021-3721 | Lenovo Pcmanager 缓冲区错误漏洞 — PCManager CWE-787 | 5.5 | Medium | 2022-04-22 |
| CVE-2021-3843 | Lenovo ThinkPad 输入验证错误漏洞 — ThinkPad BIOS CWE-20 | 6.7 | Medium | 2021-11-12 |
| CVE-2021-3786 | Lenovo ThinkPad 输入验证错误漏洞 — Notebook and ThinkPad BIOS CWE-20 | 4.4 | Medium | 2021-11-12 |
| CVE-2021-3720 | Legion Phone Pro（L79031）和Legion Phone2 Pro（L70081）上时间天气系统小部件 安全漏洞 — Legion Phone Pro (L79031) CWE-276 | 5.5 | Medium | 2021-11-12 |
| CVE-2021-3719 | ThinkCentre和ThinkStation输入验证错误漏洞 — ThinkCentre and ThinkStation BIOS CWE-20 | 6.7 | Medium | 2021-11-12 |
| CVE-2021-3718 | Lenovo ThinkPad 安全漏洞 — ThinkPad BIOS CWE-232 | 4.3 | Medium | 2021-11-12 |
| CVE-2021-3599 | Lenovo ThinkPad 输入验证错误漏洞 — ThinkPad BIOS CWE-20 | 6.7 | Medium | 2021-11-12 |
| CVE-2021-3519 | ThinkStation 授权问题漏洞 — Desktop BIOS CWE-287 | 6.4 | Medium | 2021-11-12 |
| CVE-2021-3633 | Lenovo Driver Management 代码问题漏洞 — Driver Management CWE-347 | 7.3 | High | 2021-08-17 |
| CVE-2021-3617 | Lenovo Smart Camera 命令注入漏洞 — Smart Camera X3, X5, and C2E firmware CWE-78 | 7.2 | High | 2021-08-17 |
| CVE-2021-3616 | Lenovo Smart Camera 安全漏洞 — Smart Camera X3, X5, and C2E firmware CWE-285 | 9.4 | Critical | 2021-08-17 |
| CVE-2021-3615 | Lenovo Smart Camera 代码注入漏洞 — Smart Camera X3, X5, and C2E firmware CWE-94 | 6.6 | Medium | 2021-08-17 |
| CVE-2021-3614 | Lenovo BIOS 安全漏洞 — Notebook BIOS CWE-636 | 6.4 | Medium | 2021-07-16 |
| CVE-2021-3550 | Lenovo Pcmanager 代码问题漏洞 — PCManager CWE-427 | 7.8 | High | 2021-07-16 |
| CVE-2021-3453 | 多款 Lenovo 设备 安全漏洞 — BIOS CWE-693 | 6.8 | Medium | 2021-07-16 |
| CVE-2021-3452 | Lenovo Bios 授权问题漏洞 — ThinkPad BIOS CWE-20 | 6.7 | Medium | 2021-07-16 |
| CVE-2021-3451 | Lenovo PCManager 安全漏洞 — PCManager CWE-276 | 5.5 | Medium | 2021-04-27 |
| CVE-2021-3464 | Lenovo Pcmanager 代码问题漏洞 — PCManager CWE-427 | 7.8 | High | 2021-04-27 |
| CVE-2021-3473 | Lenovo XClarity Controller 安全漏洞 — XClarity Controller (XCC) CWE-319 | 4.5 | Medium | 2021-04-13 |
| CVE-2021-3462 | Lenovo Power Management 安全漏洞 — Power Management Driver for Windows 10 CWE-276 | 5.5 | Medium | 2021-04-13 |
This page lists every published CVE security advisory associated with Lenovo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.