CVE-2025-10495

published 2025-11-12

CVE-2025-10495: A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under…

Priority P3 44 high 7.5 CVSS 3.1

AV A AC H PR N UI N S U C H I H A H

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
lenovo	app_store	< 9.0.2530.1027	9.0.2530.1027
lenovo	browser	< 9.0.6.9111	9.0.6.9111
lenovo	legion_zone	< 2.0.21	2.0.21
lenovo	pc_manager	< 5.1.140.9262	5.1.140.9262

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 7.7 HIGH CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295