Vendor
Lenovo
535 known vulnerabilities in products by Lenovo, 1 of them actively exploited (CISA KEV).
Key figures
535
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
18
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2017-3761 | Lenovo Group Service Framework application: Command Injection | 9.8 | |
| Critical | CVE-2017-17833 | Openslp: Memory Corruption | 9.8 | |
| Critical | CVE-2015-5684 | Lenovo Edge 15 Firmware: Buffer Overflow | 9.8 | |
| High | CVE-2022-3699 | Lenovo HardwareScanPlugin: Out-of-bounds Write | 7.8 | |
| Critical | CVE-2017-3758 | Lenovo Group Service Framework application: Improper Access Control | 9.8 | |
| High | CVE-2018-9075 | Iomega and LenovoEMC NAS Web UI Vulnerabilities | 8.1 | |
| Critical | CVE-2020-8349 | Lenovo Cloud Networking Operating System (CNOS): Improper Input Validation | 9.8 | |
| High | CVE-2016-8237 | Lenovo Updates: Remote Code Execution | 8.1 | |
| High | CVE-2026-14371 | Lenovo XClarity Integrator for Microsoft Windows Admin Center: OS Command Injection | — | |
| High | CVE-2016-1491 | Lenovo SHAREit: Hard-coded Credentials | 8.8 | |
| Critical | CVE-2019-6168 | Lenovo Service Bridge: Remote Code Execution | 8.8 | |
| Critical | CVE-2019-6167 | Lenovo Service Bridge: Remote Code Execution | 8.8 | |
| High | CVE-2016-1350 | Cisco IOS XE: Denial of Service | 7.5 | |
| High | CVE-2018-9066 | Lenovo xClarity Administrator: security vulnerability | 8.8 | |
| Medium | CVE-2016-8106 | HP Ethernet 10Gb 2-port 562FLR-SFP+: Denial of Service | 5.9 | |
| High | CVE-2026-19136 | Lenovo Tianxi AI Agent PC Application: OS Command Injection | 7.8 | |
| High | CVE-2021-3840 | Antilles: Uncontrolled Search Path Element | 8.8 | |
| High | CVE-2016-4782 | Lenovo SHAREit: security vulnerability | 8.8 | |
| Medium | CVE-2021-3972 | Lenovo Notebook BIOS: Active Debug Code | 6.7 | |
| High | CVE-2018-9086 | Legacy Server BMC Remote Command Injection | 7.2 | |
| High | CVE-2021-3922 | Lenovo IMController: Time-of-check Time-of-use (TOCTOU) Race Condition | 7.8 | |
| High | CVE-2021-3969 | Lenovo IMController: Time-of-check Time-of-use (TOCTOU) Race Condition | 7.8 | |
| Medium | CVE-2016-1344 | Cisco IOS XE: Denial of Service | 5.9 | |
| High | CVE-2016-1489 | Lenovo SHAREit: Information Disclosure | 8.0 |