Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:universal_device_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductUniversal Device Client (935cb96b-4798-551c-9067-b4bab3daae4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6026 vulnerable 2026-06-08 07:43:14.146342 Details available
LOW (3.1)
An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data.
Published: 2025-10-15T14:25:29.294Z
Updated: 2025-10-21T12:22:42.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6338 vulnerable 2026-06-08 06:19:46.982366 Details available
HIGH (7.8)
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
Published: 2024-01-03T21:00:26.988Z
Updated: 2025-06-03T14:43:14.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3078 vulnerable 2026-06-08 06:09:38.440649 Details available
HIGH (7.8)
An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
Published: 2023-08-17T16:47:36.274Z
Updated: 2024-10-08T16:26:10.567Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.