Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-12046

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privile

Description

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo App Store

Default version status: unaffected

  • 0 to < 9.0.2530.1027affected

Lenovo Browser

Default version status: unaffected

  • 0 to < 9.0.6.11071affected

References