PT-2025-46690 · Lenovo · Lenovo Legion Zone+3

Published 2025-11-12 · Updated 2025-11-12 · CVE-2025-10495

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager (affected versions not specified) Lenovo App Store (affected versions not specified) Lenovo Browser (affected versions not specified) Lenovo Legion Zone (affected versions not specified)

Description A potential security issue has been identified in Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications. An attacker on the same network may be able to execute arbitrary code under specific circumstances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-10495

Affected Products

Lenovo App Store

Lenovo Browser

Lenovo Legion Zone

Lenovo Pcmanager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-10495 · Security Note
• https://iknow.lenovo.com.cn/detail/434328 · Note
• https://twitter.com/CVEnew/status/1988721706471457055 · Twitter Post