Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:app_store:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductApp Store (90caf20a-5415-5442-8163-afd86fe82c75)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8485 vulnerable 2026-06-08 07:45:20.634293 Details available
HIGH (7.3)
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.
Published: 2025-11-12T19:18:28.696Z
Updated: 2025-11-12T21:03:39.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4657 vulnerable 2026-06-08 07:29:17.054128 Details available
MEDIUM (6.7)
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.
Published: 2025-07-17T19:22:28.459Z
Updated: 2025-07-17T20:05:36.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12046 vulnerable 2026-06-08 07:04:29.605701 Details available
HIGH (7.8)
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.
Published: 2025-12-10T14:08:25.124Z
Updated: 2025-12-10T15:47:33.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10495 vulnerable 2026-06-08 07:02:26.979333 Details available
HIGH (7.5)
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.
Published: 2025-11-12T19:18:44.859Z
Updated: 2026-02-26T16:57:09.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4130 vulnerable 2026-06-08 06:50:17.076782 Details available
HIGH (7.8)
A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges.
Published: 2024-10-11T15:15:41.059Z
Updated: 2024-10-11T17:52:59.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10254 vulnerable 2026-06-08 06:22:03.853010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10253 vulnerable 2026-06-08 06:22:03.852549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6450 vulnerable 2026-06-08 06:19:47.423504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3611 vulnerable 2026-06-08 05:48:21.548002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.