CVE-2026-1716

HIGH

Lenovo Vantage/Baiying - Privilege Escalation

Title source: llm

Description

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.

Scores

CVSS v3 7.1
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Classification

CWE
CWE-88
Status draft

Timeline

Published Mar 11, 2026
Tracked Since Mar 12, 2026