Lenovo

Products

ProductCVEsExploitedLatest
BIOS29–Apr 5, 2024
Desktop BIOS16–Nov 8, 2023
Vantage15–Aug 13, 2026
PC Manager11–Mar 11, 2026
App Store11–Jul 16, 2026
XClarity Controller11–Jul 26, 2024
Printers11–Aug 16, 2024
ThinkPad BIOS10–Nov 8, 2023
PCManager9–Aug 23, 2022
Browser7–Dec 10, 2025
XClarity Administrator6–Jan 14, 2025
MX3530-H Hybrid Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX3321 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
IdeaPad Slim 3 15AMN8 BIOS5–Jul 16, 2026
SD665 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX1521-R Certified Node (ThinkAgile) XCC5–Sep 13, 2024
SE350 (ThinkSystem) XCC5–Sep 13, 2024
Personal Cloud Storage T2Pro5–May 18, 2022
SD550 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX1321 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX2720-E Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX1331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX1320 Appliance (ThinkAgile) XCC5–Sep 13, 2024
SD530 (ThinkSystem) XCC5–Sep 13, 2024
SD650 DWC Dual Node Tray (ThinkSystem) XCC5–Sep 13, 2024
SD650 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX2321 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX Enclosure Certified Node (ThinkAgile) XCC5–Sep 13, 2024
Personal Cloud Storage T15–May 18, 2022
MX3330-F All-flash Appliance (ThinkAgile) XCC5–Sep 13, 2024
Lenovo XClarity Administrator5–Jun 26, 2023
HX3330 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX2331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX3376 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX3331 Node SAP HANA (ThinkAgile) XCC5–Sep 13, 2024
HX3721 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX5521 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX7821 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
Accessories and Display Manager5–Aug 13, 2026
MX3530 F All flash Appliance (ThinkAgile) XCC5–Sep 13, 2024
VX3331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX3320 Appliance (ThinkAgile) XCC5–Sep 13, 2024
MX3330-H Hybrid Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX2330 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX2320-E Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX1520-R Appliance (ThinkAgile) XCC5–Sep 13, 2024
Lenovo V15 G4 AMN BIOS5–Jul 16, 2026
HX3720 Appliance (ThinkAgile) XCC5–Sep 13, 2024
Personal Cloud Storage X15–May 18, 2022
HX1021 Edge Certified Node 3yr (ThinkAgile) XCC5–Sep 13, 2024
SD530 V3 (ThinkSystem) XCC5–Sep 13, 2024
SD630 V2 (ThinkSystem) XCC5–Sep 13, 2024
SD650-N V2 (ThinkSystem) XCC5–Sep 13, 2024
SD650 V2 (ThinkSystem) XCC5–Sep 13, 2024
SE350 V2 (ThinkEdge) XCC5–Sep 13, 2024
HX7820 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX3331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
Personal Cloud Storage A15–May 18, 2022
HX3375 Appliance (ThinkAgile) XCC5–Sep 13, 2024
Diagnostics5–Apr 15, 2026
Personal Cloud Storage T25–May 18, 2022
P920 Rack Workstation (ThinkStation) XCC5–Sep 13, 2024
HX5531 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
MX3531 H Hybrid Certified node (ThinkAgile) XCC5–Sep 13, 2024
Baiying5–Mar 11, 2026
HX7520 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX7531 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX7530 Appliance (ThinkAgile) XCC5–Sep 13, 2024
MX3331-F All-flash Certified node (ThinkAgile) XCC5–Sep 13, 2024
HX7530 Appl for SAP HANA (ThinkAgile) XCC5–Sep 13, 2024
HX5521-C Certified Node (ThinkAgile) XCC5–Sep 13, 2024
ST250 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX5520-C Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX5520 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX3521-G Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX3520-G Appliance (ThinkAgile) XCC5–Sep 13, 2024
MX3531-F All-flash Certified node (ThinkAgile) XCC5–Sep 13, 2024
HX7521 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX5530 Appliance (ThinkAgile) XCC5–Sep 13, 2024
MX Edge Appliance - MX1020 (ThinkAgile) XCC5–Sep 13, 2024
HX7531 Node SAP HANA (ThinkAgile) XCC5–Sep 13, 2024
MX3331-H Hybrid Certified node (ThinkAgile) XCC5–Sep 13, 2024
Notebook BIOS5–Apr 5, 2024
Notebook5–Aug 23, 2023
Dock Manager4–Aug 13, 2026
Yoga Pro 9 14IRP8 BIOS4–Jul 16, 2026
Smart Connect4–Jul 16, 2026
Yoga 9 14IRP8 BIOS4–Jul 16, 2026
SMM, SMM2, FPC4–Apr 15, 2024
IdeaPad Pro 5 16IAH10 BIOS4–Jul 16, 2026
XClarity Orchestrator4–Aug 4, 2026
Software Fix4–Sep 10, 2026
IdeaPad Pro 5 16IPH11 BIOS4–Jul 16, 2026
IdeaPad Slim 3 16IRH10R BIOS4–Jul 16, 2026
IdeaPad Slim 3 16ARP10 BIOS4–Jul 16, 2026
ThinkBook Plus G6 Rollable BIOS4–Jul 16, 2026
Lenovo V15 G2 IJL Laptop BIOS4–Jul 16, 2026
IdeaPad Slim 3 16IRH8 BIOS4–Jul 16, 2026
IdeaPad Pro 5 16IRH8 BIOS4–Jul 16, 2026
IdeaPad Pro 5 16IMH9 BIOS4–Jul 16, 2026
IdeaPad Pro 5 16ASP10 BIOS4–Jul 16, 2026
Commercial Vantage4–Aug 13, 2026
IdeaPad Pro 5 16AGP11 BIOS4–Jul 16, 2026
Yoga Tab Plus (TB520FU)4–Oct 15, 2026
IdeaPad Slim 3 16IRU9 BIOS4–Jul 16, 2026
Yoga Pro 9 16IMH9 BIOS4–Jul 16, 2026
Yoga 9 2-in-1 14ILL10 BIOS4–Jul 16, 2026
IdeaPad 5 15ABA7 BIOS4–Jul 16, 2026
Yoga 9 2-in-1 14IMH9 BIOS4–Jul 16, 2026
Yoga Book 9 13IMU9 BIOS4–Jul 16, 2026
LOQ 15IAX9E BIOS4–Jul 16, 2026
LOQ 15ARP10E BIOS4–Jul 16, 2026
Yoga Book 9 14IAH10 BIOS4–Jul 16, 2026
Idea Tab Pro (TB373FU)4–Oct 15, 2026
ThinkPad4–Aug 17, 2023
Lenovo V14 G6 ITN BIOS4–Jul 16, 2026
ThinkBook Plus G4 IRU BIOS4–Jul 16, 2026
Lenovo V15 G4 IAH BIOS4–Jul 16, 2026
ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS4–Jul 16, 2026
ThinkPad X13s4–Jan 5, 2023
Yoga Pro 7 15IPH11 BIOS4–Jul 16, 2026
Legion Slim 5 14APH8 BIOS4–Jul 16, 2026
Legion Pro 7 16IAX10H BIOS4–Jul 16, 2026
Lenovo V15 G5 IRL BIOS4–Jul 16, 2026
Legion Pro 7 16ADR10H BIOS4–Jul 16, 2026
Legion Pro 5 16IAX10 BIOS4–Jul 16, 2026
Legion Pro 5 16IRX9 BIOS4–Jul 16, 2026
Legion Pro 7 16AFR10H BIOS4–Jul 16, 2026
ThinkBook 16p G6 IAX BIOS4–Jul 16, 2026
Legion 9 16IRX9 BIOS4–Jul 16, 2026
Legion 5 15IRX9 BIOS4–Jul 16, 2026
Legion Pro 5 16ADR10 BIOS4–Jul 16, 2026
Legion 5 15AKP10 BIOS4–Jul 16, 2026
Legion 5 15AHP10 BIOS4–Jul 16, 2026
Legion 5 15APH9 BIOS4–Jul 16, 2026
Legion 5 15IAX10 BIOS4–Jul 16, 2026
Legion Pro 5 16AFR10 BIOS4–Jul 16, 2026
ThinkBook 16p G5 IRX BIOS4–Jul 16, 2026
Tab K9 (TB305FU)4–Oct 15, 2026
Legion 5 15IRX10 BIOS4–Jul 16, 2026
Legion 7 16AGP11 BIOS4–Jul 16, 2026
Legion 7 16IAX10 BIOS4–Jul 16, 2026
ThinkBook 16p G6 ADR BIOS4–Jul 16, 2026
Legion Pro 5 16IRX10 BIOS4–Jul 16, 2026
Tab K9 (TB305XU)4–Oct 15, 2026
Tab M10 5G (TB360ZU)4–Oct 15, 2026
Legion Pro 7 16ARX8H BIOS4–Jul 16, 2026
IdeaPad Slim 3 14ITN9 BIOS4–Jul 16, 2026
Lenovo V15 G6 ARP BIOS4–Jul 16, 2026
Legion Pro 7 16IRX9H BIOS4–Jul 16, 2026
Legion Pro 5 16ARX8 BIOS4–Jul 16, 2026
Lenovo S14 G3 IAP BIOS4–Jul 16, 2026
Display Control Center3–Dec 16, 2024
Smart Camera X3, X5, and C2E firmware3–Aug 17, 2021
Printer GM265DN (production date June 2022 and before)3–Oct 27, 2023
Printer GM266DNS3–Oct 27, 2023
Printer G263DNS3–Oct 27, 2023
Printer GM265DN (production date July 2022 and later)3–Oct 27, 2023
HardwareScanPlugin 3–Oct 24, 2023
FileZ Client3–Sep 10, 2026
FileZ3–Mar 11, 2026
Lenovo XClarity Controller (XCC)3–Oct 24, 2023
ThinkPlus TSD3033–Jan 14, 2026
ThinkPlus TU8003–Jan 14, 2026
ThinkPlus FU1003–Jan 14, 2026
Tab Plus (TB351FU)3–Oct 15, 2026
Tab P12 (TB370FU)3–Oct 15, 2026
Tab K11 (TB330XUP)3–Oct 15, 2026
System Update3–Aug 13, 2026
Tab K11 (TB330FUP)3–Oct 15, 2026
ThinkPlus FU2003–Jan 14, 2026
Smart Network PTZ X5E2–Oct 15, 2026
Smart Network PTZ X5Q2–Oct 15, 2026
Smart Camera XW12–Oct 15, 2026
Smart Camera X9T2–Oct 15, 2026
Smart Network PTZ X5T2–Oct 15, 2026
Smart Camera RQ32–Oct 15, 2026
Smart Camera C352–Oct 15, 2026
Smart Camera C5X2–Oct 15, 2026
Smart Camera X6Q2–Oct 15, 2026
Service Bridge2–Apr 15, 2026
Smart Camera C332–Oct 15, 2026
Smart Camera C33 Pro2–Oct 15, 2026
Smart Camera X6T2–Oct 15, 2026
S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS2–Jun 10, 2026
IMController2–May 18, 2022
Scanner Pro2–Nov 12, 2025
Home Storage Hub X202–May 13, 2026
Printer LJ4010DN2–May 28, 2020
Home Storage Hub T202–May 13, 2026
Personal Cloud T22–May 13, 2026
Personal Cloud T12–May 13, 2026
Personal Cloud T2Pro2–May 13, 2026
Personal Cloud T2s2–May 13, 2026
Personal Cloud A1s2–May 13, 2026
Personal Cloud A12–May 13, 2026
P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS2–Jun 10, 2026
P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS2–Jun 10, 2026
P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS2–Jun 10, 2026
P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS2–Jun 10, 2026

Exploited and recent CVEs

  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92629 High 7.3 A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitra 0.1%
  • CVE-2026-89062 Medium 5.5 A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error. <0.1%
  • CVE-2026-89057 Medium 6.8 A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access. 0.2%