Browse all 387 CVE security advisories affecting Lenovo. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Lenovo operates as a global technology manufacturer, primarily producing personal computers, servers, and mobile devices for enterprise and consumer markets. Its software ecosystem, including pre-installed utilities and firmware, has historically exhibited vulnerabilities such as remote code execution, cross-site scripting, and privilege escalation flaws within management interfaces. These weaknesses often stem from complex supply chain integrations and legacy codebases embedded in hardware. While the company maintains standard security protocols, past incidents have highlighted risks associated with third-party components and default configurations in diagnostic tools. The current record of 359 Common Vulnerabilities and Exposures reflects the broad attack surface inherent in its diverse hardware portfolio. Continuous patching and rigorous code audits remain critical for mitigating these persistent threats across its extensive product line.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-6387 | Lenovo system update 授权问题漏洞 — System Update CWE-290 | 7.0 | High | 2026-08-13 |
| CVE-2022-0354 | Lenovo Vantage代码注入漏洞 — System Update | 7.3 | High | 2022-04-22 |
| CVE-2020-8342 | Lenovo System Update 安全漏洞 — System Update CWE-367 | 7.3 | High | 2020-09-15 |
| CVE-2019-6175 | System Update Vulnerability — System Update | 6.2 | - | 2019-09-26 |
| CVE-2019-6163 | Lenovo System Update 安全漏洞 — System Update | 7.5 | - | 2019-06-26 |
This page lists every published CVE security advisory associated with Lenovo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.