目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Lenovo 厂商漏洞列表 / CVE 中文分析 387

Lenovo 厂商相关 387 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

联想主要提供个人电脑、服务器及智能设备，其软件生态涵盖固件、BIOS及预装应用。历史漏洞多集中于远程代码执行、缓冲区溢出及权限提升，常源于固件更新机制或驱动组件缺陷。值得关注的是，其ThinkPad系列曾因固件安全机制被曝存在物理访问下的持久化风险，促使厂商强化签名验证与TPM集成。随着物联网设备普及，供应链攻击面扩大，持续的安全更新与透明披露成为其安全治理的关键环节。

Top products by Lenovo: BIOS Desktop BIOS Vantage PC Manager XClarity Controller Printers ThinkPad BIOS ThinkSystem SMM PCManager XClarity Administrator (LXCA) App Store Lenovo XClarity Administrator Service Bridge ThinkPad XClarity Administrator System Update HX5530 Appliance (ThinkAgile) XCC Notebook BIOS Personal Cloud Storage A1 Notebook Lenovo XClarity Controller (XCC) XClarity Orchestrator Yoga Pro 7 15IPH11 BIOS Smart Connect ThinkPad X13s Dock Manager SMM, SMM2, FPC ThinkPlus FU100 Software Fix Accessories and Display Manager
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-14256 Lenovo ELAN TrackPoint driver 缓冲区错误漏洞 — E16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPad CWE-125 4.7 Medium 2026-08-13
CVE-2026-15994 Lenovo Vantage 后置链接漏洞 — Commercial Vantage CWE-59 7.0 High 2026-08-13
CVE-2026-63423 Lenovo Accessories and Display Manager 加密问题漏洞 — Accessories and Display Manager CWE-321 7.8 High 2026-08-13
CVE-2026-63424 Lenovo Dock Manager 信任管理问题漏洞 — Dock Manager CWE-261 7.3 High 2026-08-13
CVE-2026-63425 Lenovo Dock Manager 权限许可和访问控制问题漏洞 — Dock Manager CWE-276 7.8 High 2026-08-13
CVE-2026-63426 Lenovo Dock Manager 后置链接漏洞 — Dock Manager CWE-59 7.1 High 2026-08-13
CVE-2026-12036 Lenovo Vantage 后置链接漏洞 — Vantage CWE-59 7.1 High 2026-08-13
CVE-2026-6387 Lenovo system update 授权问题漏洞 — System Update CWE-290 7.0 High 2026-08-13
CVE-2026-16793 Lenovo XClarity Orchestrator 输入验证错误漏洞 — XClarity Orchestrator CWE-78 8.8 High 2026-08-04
CVE-2026-16792 Lenovo XClarity Orchestrator 加密问题漏洞 — XClarity Orchestrator CWE-295 6.1 Medium 2026-08-04
CVE-2026-16791 Lenovo XClarity Essentials OneCLI 资源管理错误漏洞 — XClarity Essentials OneCLI CWE-377 3.9 Low 2026-08-04
CVE-2026-10590 Lenovo Yoga Pro 7 15IPH11 BIOS 安全漏洞 — Yoga Pro 7 15IPH11 BIOS 4.4 Medium 2026-07-16
CVE-2026-10589 Lenovo BIOS 缓冲区错误漏洞 — Yoga Pro 7 15IPH11 BIOS 6.0 Medium 2026-07-16
CVE-2026-10588 Lenovo Yoga Pro 7 15IPH11 BIOS 信息泄露漏洞 — Yoga Pro 7 15IPH11 BIOS 4.4 Medium 2026-07-16
CVE-2026-10587 Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞 — Yoga Pro 7 15IPH11 BIOS 6.0 Medium 2026-07-16
CVE-2026-14371 Lenovo XClarity Integrator for Microsoft Windows Admin Center 命令注入漏洞 — XClarity Integrator for Microsoft Windows Admin Center CWE-78 - - 2026-07-16
CVE-2026-13104 Lenovo app store 权限许可和访问控制问题漏洞 — App Store CWE-250 7.3 High 2026-07-16
CVE-2026-13103 Lenovo app store 路径遍历漏洞 — App Store CWE-22 7.3 High 2026-07-16
CVE-2026-9046 Lenovo Legion Zone 权限许可和访问控制问题漏洞 — Legion Zone CWE-277 7.0 High 2026-07-16
CVE-2026-6511 Lenovo Smart Connect 授权问题漏洞 — Smart Connect CWE-306 5.5 Medium 2026-07-16
CVE-2025-10238 Lenovo ThinkPad 缓冲区错误漏洞 — X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS CWE-787 6.7 Medium 2026-06-10
CVE-2025-10237 Lenovo ThinkPad 加密问题漏洞 — X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS CWE-327 6.7 Medium 2026-06-10
CVE-2026-6090 Lenovo Smart Connect 安全漏洞 — Smart Connect CWE-290 7.0 High 2026-06-10
CVE-2026-8637 Lenovo LanSchool Classic 代码问题漏洞 — LanSchool Classic CWE-427 7.8 High 2026-06-10
CVE-2026-9045 Lenovo Accessories and Display Manager for Enterprise 访问控制错误漏洞 — Accessories and Display Manager for Enterprise CWE-306 7.8 High 2026-06-10
CVE-2026-7516 Lenovo Android Application 安全漏洞 — Application CWE-749 4.3 Medium 2026-06-10
CVE-2026-6282 Lenovo Personal Cloud Storage 路径遍历漏洞 — Personal Cloud T2s CWE-22 8.1 High 2026-05-13
CVE-2026-6281 Lenovo Personal Cloud Storage 操作系统命令注入漏洞 — Personal Cloud T2s CWE-78 8.8 High 2026-05-13
CVE-2026-4145 Lenovo Software Fix 安全漏洞 — Software Fix CWE-88 7.8 High 2026-04-15
CVE-2026-4135 Lenovo Software Fix 安全漏洞 — Software Fix CWE-59 6.6 Medium 2026-04-15

本页汇总了 Lenovo 厂商截至目前公开的全部 387 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。