Lenovo
Number 48 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
400
Critical
5
High
139
Known Exploited
0
Exploit available
0
Network, no login needed
10.0%
Of 371 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 61 | 1 | 30 | 27 | 3 | 0 |
| 2025 | 38 | 0 | 21 | 16 | 1 | 0 |
| 2024 | 69 | 0 | 37 | 29 | 3 | 0 |
| 2023 | 96 | 0 | 23 | 72 | 1 | 0 |
| 2022 | 25 | 2 | 7 | 16 | 0 | 0 |
| 2021 | 24 | 1 | 4 | 19 | 0 | 0 |
| 2020 | 42 | 1 | 12 | 26 | 1 | 2 |
| 2019 | 29 | 0 | 5 | 13 | 0 | 11 |
| 2018 | 16 | 0 | 0 | 0 | 0 | 16 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| BIOS | 32 | 0 |
| Desktop BIOS | 16 | 0 |
| PC Manager | 13 | 8 |
| Vantage | 13 | 8 |
| Printers | 11 | 3 |
| XClarity Controller | 11 | 7 |
| ThinkPad BIOS | 10 | 0 |
| PCManager | 9 | 5 |
| ThinkSystem SMM | 9 | 0 |
| XClarity Administrator (LXCA) | 8 | 2 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 52 | 2 |
| Incorrect Permissions | 28 | 14 |
| Improper Input Validation | 26 | 6 |
| Uncontrolled Search Path Element | 25 | 23 |
| Command Injection | 20 | 20 |
| Authentication Issues | 14 | 7 |
| Improper Certificate Validation | 12 | 5 |
| Cleartext Transmission of Sensitive Information | 8 | 0 |
| Race Condition | 8 | 4 |
| Improper Link Resolution Before File Access ('Link Following') | 6 | 4 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-92777 | Lenovo Idea Tab Pro (TB373FU) vulnerability | Medium | 0.1% | |
| CVE-2026-92629 | Lenovo Baiying PC Client: Missing Authorization | High | 0.1% | |
| CVE-2026-89062 | Lenovo Energy Management Driver: Memory Corruption | Medium | 0.1% | |
| CVE-2026-89057 | Lenovo Idea Tab Pro (TB373FU): Authentication Issues | Medium | 0.2% | |
| CVE-2026-75941 | Lenovo Legion Zone Application: Insecure Deserialization | High | 0.3% | |
| CVE-2026-16755 | Lenovo Smart Camera C33 vulnerability | Medium | 0.2% | |
| CVE-2026-16754 | Lenovo Smart Camera C33 vulnerability | Medium | 0.1% | |
| CVE-2026-75940 | Lenovo Health Application: Hard-coded Credentials | Critical | 0.4% | |
| CVE-2026-63427 | Lenovo Software Fix vulnerability | High | 0.2% | |
| CVE-2026-19136 | Lenovo Tianxi AI Agent PC Application: Command Injection | High | 1.1% |