Lenovo

Products

ProductCVEsExploitedLatest
BIOS29–Apr 5, 2024
Desktop BIOS16–Nov 8, 2023
Vantage15–Aug 13, 2026
XClarity Controller11–Jul 26, 2024
PC Manager11–Mar 11, 2026
Printers11–Aug 16, 2024
App Store11–Jul 16, 2026
ThinkPad BIOS10–Nov 8, 2023
PCManager9–Aug 23, 2022
Browser7–Dec 10, 2025
XClarity Administrator6–Jan 14, 2025
Baiying5–Mar 11, 2026
HX3320 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX5520-C Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX1320 Appliance (ThinkAgile) XCC5–Sep 13, 2024
SD630 V2 (ThinkSystem) XCC5–Sep 13, 2024
IdeaPad Slim 3 15AMN8 BIOS5–Jul 16, 2026
MX3331-F All-flash Certified node (ThinkAgile) XCC5–Sep 13, 2024
HX3721 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
SD650 V2 (ThinkSystem) XCC5–Sep 13, 2024
HX5531 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX3330 Appliance (ThinkAgile) XCC5–Sep 13, 2024
Personal Cloud Storage X15–May 18, 2022
Notebook5–Aug 23, 2023
HX3375 Appliance (ThinkAgile) XCC5–Sep 13, 2024
Lenovo XClarity Administrator5–Jun 26, 2023
SD530 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX1021 Edge Certified Node 3yr (ThinkAgile) XCC5–Sep 13, 2024
SD650-N V2 (ThinkSystem) XCC5–Sep 13, 2024
HX3376 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX2321 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX7530 Appl for SAP HANA (ThinkAgile) XCC5–Sep 13, 2024
HX5521-C Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX1331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
SE350 V2 (ThinkEdge) XCC5–Sep 13, 2024
MX Edge Appliance - MX1020 (ThinkAgile) XCC5–Sep 13, 2024
HX3331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
MX3531 H Hybrid Certified node (ThinkAgile) XCC5–Sep 13, 2024
HX3521-G Certified Node (ThinkAgile) XCC5–Sep 13, 2024
Accessories and Display Manager5–Aug 13, 2026
MX3530-H Hybrid Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX7520 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX7530 Appliance (ThinkAgile) XCC5–Sep 13, 2024
Personal Cloud Storage T25–May 18, 2022
Personal Cloud Storage A15–May 18, 2022
HX1521-R Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX5520 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX1321 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX2330 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX3321 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
SD650 V3 (ThinkSystem) XCC5–Sep 13, 2024
MX3530 F All flash Appliance (ThinkAgile) XCC5–Sep 13, 2024
MX3330-F All-flash Appliance (ThinkAgile) XCC5–Sep 13, 2024
MX3531-F All-flash Certified node (ThinkAgile) XCC5–Sep 13, 2024
HX7820 Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX2320-E Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX3331 Node SAP HANA (ThinkAgile) XCC5–Sep 13, 2024
SD665 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX3720 Appliance (ThinkAgile) XCC5–Sep 13, 2024
SD530 (ThinkSystem) XCC5–Sep 13, 2024
MX3331-H Hybrid Certified node (ThinkAgile) XCC5–Sep 13, 2024
HX7531 Node SAP HANA (ThinkAgile) XCC5–Sep 13, 2024
HX3520-G Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX5521 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
Diagnostics5–Apr 15, 2026
SE350 (ThinkSystem) XCC5–Sep 13, 2024
SD650 DWC Dual Node Tray (ThinkSystem) XCC5–Sep 13, 2024
Lenovo V15 G4 AMN BIOS5–Jul 16, 2026
SD550 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX5530 Appliance (ThinkAgile) XCC5–Sep 13, 2024
Personal Cloud Storage T2Pro5–May 18, 2022
Personal Cloud Storage T15–May 18, 2022
Notebook BIOS5–Apr 5, 2024
VX3331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
P920 Rack Workstation (ThinkStation) XCC5–Sep 13, 2024
HX7821 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
ST250 V3 (ThinkSystem) XCC5–Sep 13, 2024
HX1520-R Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX2331 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX Enclosure Certified Node (ThinkAgile) XCC5–Sep 13, 2024
MX3330-H Hybrid Appliance (ThinkAgile) XCC5–Sep 13, 2024
HX7521 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX7531 Certified Node (ThinkAgile) XCC5–Sep 13, 2024
HX2720-E Appliance (ThinkAgile) XCC5–Sep 13, 2024
Legion Slim 5 14APH8 BIOS4–Jul 16, 2026
IdeaPad Slim 3 16IRH8 BIOS4–Jul 16, 2026
Tab K9 (TB305XU)4–Oct 15, 2026
IdeaPad Slim 3 14ITN9 BIOS4–Jul 16, 2026
Legion Pro 7 16AFR10H BIOS4–Jul 16, 2026
Legion 5 15AKP10 BIOS4–Jul 16, 2026
Lenovo V15 G5 IRL BIOS4–Jul 16, 2026
Commercial Vantage4–Aug 13, 2026
LOQ 15ARP10E BIOS4–Jul 16, 2026
Legion Pro 7 16ARX8H BIOS4–Jul 16, 2026
Dock Manager4–Aug 13, 2026
Yoga 9 2-in-1 14IMH9 BIOS4–Jul 16, 2026
Legion Pro 5 16AFR10 BIOS4–Jul 16, 2026
ThinkBook 16p G6 IAX BIOS4–Jul 16, 2026
Yoga 9 14IRP8 BIOS4–Jul 16, 2026
Tab M10 5G (TB360ZU)4–Oct 15, 2026
ThinkBook 16p G6 ADR BIOS4–Jul 16, 2026
Yoga Tab Plus (TB520FU)4–Oct 15, 2026
ThinkPad4–Aug 17, 2023
IdeaPad Slim 3 16IRU9 BIOS4–Jul 16, 2026
IdeaPad Pro 5 16IMH9 BIOS4–Jul 16, 2026
Lenovo V15 G6 ARP BIOS4–Jul 16, 2026
Legion 5 15IRX9 BIOS4–Jul 16, 2026
Lenovo V14 G6 ITN BIOS4–Jul 16, 2026
Smart Connect4–Jul 16, 2026
IdeaPad Pro 5 16IRH8 BIOS4–Jul 16, 2026
SMM, SMM2, FPC4–Apr 15, 2024
ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS4–Jul 16, 2026
Legion Pro 5 16ADR10 BIOS4–Jul 16, 2026
Legion Pro 5 16IRX10 BIOS4–Jul 16, 2026
IdeaPad Pro 5 16IPH11 BIOS4–Jul 16, 2026
Yoga Book 9 13IMU9 BIOS4–Jul 16, 2026
ThinkPad X13s4–Jan 5, 2023
Legion 5 15APH9 BIOS4–Jul 16, 2026
Legion 9 16IRX9 BIOS4–Jul 16, 2026
ThinkBook Plus G4 IRU BIOS4–Jul 16, 2026
Lenovo V15 G4 IAH BIOS4–Jul 16, 2026
XClarity Orchestrator4–Aug 4, 2026
IdeaPad Pro 5 16ASP10 BIOS4–Jul 16, 2026
IdeaPad 5 15ABA7 BIOS4–Jul 16, 2026
LOQ 15IAX9E BIOS4–Jul 16, 2026
IdeaPad Pro 5 16AGP11 BIOS4–Jul 16, 2026
Legion Pro 5 16ARX8 BIOS4–Jul 16, 2026
Yoga Book 9 14IAH10 BIOS4–Jul 16, 2026
Yoga 9 2-in-1 14ILL10 BIOS4–Jul 16, 2026
Lenovo V15 G2 IJL Laptop BIOS4–Jul 16, 2026
ThinkBook 16p G5 IRX BIOS4–Jul 16, 2026
Legion 5 15IRX10 BIOS4–Jul 16, 2026
Legion Pro 5 16IRX9 BIOS4–Jul 16, 2026
IdeaPad Slim 3 16IRH10R BIOS4–Jul 16, 2026
Lenovo S14 G3 IAP BIOS4–Jul 16, 2026
Legion Pro 7 16ADR10H BIOS4–Jul 16, 2026
Legion 7 16AGP11 BIOS4–Jul 16, 2026
Legion 5 15IAX10 BIOS4–Jul 16, 2026
Legion Pro 7 16IRX9H BIOS4–Jul 16, 2026
Tab K9 (TB305FU)4–Oct 15, 2026
Idea Tab Pro (TB373FU)4–Oct 15, 2026
IdeaPad Pro 5 16IAH10 BIOS4–Jul 16, 2026
Legion Pro 7 16IAX10H BIOS4–Jul 16, 2026
IdeaPad Slim 3 16ARP10 BIOS4–Jul 16, 2026
Yoga Pro 9 14IRP8 BIOS4–Jul 16, 2026
Legion 5 15AHP10 BIOS4–Jul 16, 2026
Software Fix4–Sep 10, 2026
Yoga Pro 9 16IMH9 BIOS4–Jul 16, 2026
Legion Pro 5 16IAX10 BIOS4–Jul 16, 2026
Legion 7 16IAX10 BIOS4–Jul 16, 2026
ThinkBook Plus G6 Rollable BIOS4–Jul 16, 2026
Yoga Pro 7 15IPH11 BIOS4–Jul 16, 2026
ThinkPlus FU2003–Jan 14, 2026
Display Control Center3–Dec 16, 2024
Tab P12 (TB370FU)3–Oct 15, 2026
Printer GM266DNS3–Oct 27, 2023
System Update3–Aug 13, 2026
Printer G263DNS3–Oct 27, 2023
Tab K11 (TB330XUP)3–Oct 15, 2026
FileZ Client3–Sep 10, 2026
Tab Plus (TB351FU)3–Oct 15, 2026
Tab K11 (TB330FUP)3–Oct 15, 2026
Printer GM265DN (production date June 2022 and before)3–Oct 27, 2023
HardwareScanPlugin 3–Oct 24, 2023
Lenovo XClarity Controller (XCC)3–Oct 24, 2023
ThinkPlus TSD3033–Jan 14, 2026
Smart Camera X3, X5, and C2E firmware3–Aug 17, 2021
ThinkPlus FU1003–Jan 14, 2026
FileZ3–Mar 11, 2026
ThinkPlus TU8003–Jan 14, 2026
Printer GM265DN (production date July 2022 and later)3–Oct 27, 2023
Home Storage Hub X202–May 13, 2026
L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS2–Jun 10, 2026
Tab Extreme (TB570ZU/TB570FU)2–Oct 15, 2026
Enterprise Network Disk2–Sep 24, 2020
T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS2–Jun 10, 2026
Personal Cloud X12–May 13, 2026
Smart Camera X9T2–Oct 15, 2026
Lenovo System Management Module (SMM)2–Apr 22, 2022
Tab M11 (TB330XU)2–Oct 15, 2026
Tab Extreme TB570ZU TB570FU2–Jan 14, 2026
X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS2–Jun 10, 2026
X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS2–Jun 10, 2026
Smart Camera C5X2–Oct 15, 2026
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)2–Oct 15, 2026
X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS2–Jun 10, 2026
Printer LJ4010DN2–May 28, 2020
P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS2–Jun 10, 2026
X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS2–Jun 10, 2026
IMController2–May 18, 2022
ThinkPad X13 Gen3 BIOS - Linux2–Oct 9, 2023
L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS2–Jun 10, 2026
P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS2–Jun 10, 2026
L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS2–Jun 10, 2026
Tab M11 (TB330FU)2–Oct 15, 2026
Smart Camera RQ32–Oct 15, 2026
Tab K11 Plus WIFI ROW: TB352FU2–Oct 15, 2026
X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS2–Jun 10, 2026
Vantage SystemUpdate Plugin2–Oct 27, 2023
T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS2–Jun 10, 2026

Exploited and recent CVEs

  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92777 Medium 6.4 A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code. 0.1%
  • CVE-2026-92629 High 7.3 A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitra 0.1%
  • CVE-2026-89062 Medium 5.5 A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error. <0.1%
  • CVE-2026-89057 Medium 6.8 A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access. 0.2%