lenovo_exec

lenovoexec CVE-2022-3699 with arbitrary kernel code execution capability original exploit: https://github.com/alfarom256/CVE-2022-3699...

CVE-2025-68921

CVE-2025-68921 A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM . This vulnerability was reported to Lenovo PSIRT, tracked as...

CVE-2026-0827

CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Note: This documentation and exploit code was generated with AI assistance Kiro. Verify before use — AI can and does make mistakes. Device Field| Value ---|--- Model| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core Cortex-A9 @ 1.2GHz Kernel| Linux...

CVE-2022-3699

CVE-2022-3699 Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory read/write. Thank you to ch3rn0byl for helping with this and I totally 100% ripped two of his functions. Explanatio...

Lenovo-TB365FC-GhostLock-CVE-2026-43499

适用于 Lenovo TB365FC 的 GhostLock 通过 CVE-2026-43499（rtmutex removewaiter 释放后使用）以及 DirtyPipe 凭据补丁，为 ZUXOS / Android 16 提供 Root。无需解锁引导加载程序或刷机即可加载 KernelSU LKM。重启后 Root 会丢失。 固件：ZUXOS 1.5.10.178 内核：5.15.170-android13-8-00003-g9a0b9d56c900-ab13225392（受门控；不匹配可能导致内核崩溃） 要求 adb 位于 PATH 中，并已启用 USB 调试 Android...

CVE-2025-2502

Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...

VirtualLockSensorLPE

VirtualLockSensorLPE Description Local privilege escalation PoC exploit for CVE-2025-0886 that targets Elliptic Virtual Lock Sensor version 3.1.60531.2 running on Windows, which is installed by default on certain Lenovo laptop models. Allows execution of a payload in the context of SYSTEM from a...

lenovo_y700_tb320fc_on_CVE-2025-21479

TB320FC 内核提权 — CVE-2025-21479 English | 简体中文 联想拯救者 Y700 2023（TB320FC ）的内存态内核提权 方案，利用 CVE-2025-21479 （Qualcomm Adreno GPU SMMU 漏洞），并通过 ReSukiSU 提供完整的 root 管理能力。 不需要解锁 Bootloader、不需要刷机、激活阶段不需要电脑 。 ⚠️ 仅限对你自己拥有 或明确获得授权 的设备进行安全研究。详见免责声明。 目标设备 本项目的所有偏移与行为均针对以下设备调校。未经重新适配，不要预期在其他机型/固件上可用 （详见...

lenovo-dispatcher-poc

Lenovo Dispatcher PoC This is a basic proof of concept to exploit lenovo dispatcher driver LnvMSRIO.sys CVE-2025-8061. Vulnerabilities found by Luis Casvella source: https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html. The main idea of this poc is to exploit the read/write...

CVE-2025-8061-Exploit

CVE-2025-8061 Exploit Overview Proof-of-Concept exploit for LnvMSRIO.sys Lenovo MSR I/O Driver, demonstrating arbitrary physical memory read/write and kernel memory access via Superfetch VA-to-PA translation. Driver Information Property| Value ---|--- Driver Name| LnvMSRIO.sys Device Name|...

CVE-2026-97504

A flaw was found in the Linux kernel's Lenovo SE10 watchdog driver. Improper error handling during device initialization fails to clear a platform device pointer if registration fails, resulting in a use-after-free condition. A local user could exploit this vulnerability to cause a Denial of...

PT-2026-98123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and resource leak risk exists in the lenovo se10 wdt watchdog driver. The issue occurs when the se10 pdev variable is not properly nullified, potentially allowing the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: PCI: Fixed a use-after-free of slot-bus during hot removal. Dennis reported a boot crash on recent Lenovo laptops with a USB4 dock. Since the commit 0fc70886569c "thunderbolt: Reset USB4 v2 host router" and the commit...

CVE-2026-75940

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information...

CVE-2026-63427

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...