CVE-2025-10495

published 2025-11-12

CVE-2025-10495: A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under…

high 7.7 CVSS 4.0

AV A AC L AT P PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
lenovo	app_store	< 9.0.2530.1027	9.0.2530.1027
lenovo	browser	< 9.0.6.9111	9.0.6.9111
lenovo	legion_zone	< 2.0.21	2.0.21
lenovo	pc_manager	< 5.1.140.9262	5.1.140.9262

CWE-295