Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-1716

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbi

Description

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Vantage

Default version status: unaffected

  • 0 to < 1.0.8.15affected

Lenovo Baiying

Default version status: unaffected

  • 0 to < 1.0.8.15affected

References