CVE-2025-10495

State: Published
Severity: 7.7 High
Published: Nov 12, 2025
Updated: Feb 26, 2026
Reserved: Sep 15, 2025

Description

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	lenovo
3.1	7.5 High	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	lenovo

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
App StoreLenovo	before 9.0.2530.1027Affected
PC ManagerLenovo	before 5.1.140.9262Affected
BrowserLenovo	before 9.0.6.9111Affected
Legion ZoneLenovo	before 2.0.21Affected

References

https://iknow.lenovo.com.cn/detail/434328

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.