CVE-2024-4130

CVE-2024-4130 corresponds to a DLL hijack vulnerability in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. The connected documents consistently describe a local-privilege-escalation impact via a DLL hijack in Lenovo App Store, but do not furnish concre...

CVE-2023-6450

CVE-2023-6450 concerns the Lenovo App Store, where an incorrect permissions vulnerability could allow a local attacker to consume system resources and trigger a denial of service. The publicly referenced metrics indicate a CVSS v3.1 base score of 5.5 (MEDIUM) with a local attack vector, low attac...

CVE-2025-8485

CVE-2025-8485 affects Lenovo App Store. Description: an improper permissions vulnerability could allow a locally authenticated user to execute code with elevated privileges during the installation of an application. Affected component: Lenovo App Store's installation process. Root cause: improper...