CVE-2026-13104

HIGH

Lenovo App Store < 9.0.2930.0514 - Execution with Unnecessary Privileges

Title source: rule
STIX 2.1

Description

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://iknow.lenovo.com.cn/detail/441419

Scores

CVSS v3 7.3
EPSS 0.0011
EPSS Percentile 1.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-250
Status published
Products (1)
Lenovo/App Store < 9.0.2930.0514
Published Jul 16, 2026
Tracked Since Jul 16, 2026