Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-0827

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or

Description

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Diagnostics

Default version status: unaffected

  • 0 to < 5.26.0affected

Lenovo Vantage

Default version status: unaffected

  • 0 to < 4.7.1.4affected

References