Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when i

Description

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Legion Zone

Default version status: unaffected

  • 0 to < 2.0.26affected

Lenovo App Store

Default version status: unaffected

  • 0 to < 9.0.29affected

References