CVE-2026-13104

HighCVSS 7.3

Published: 16/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability in Lenovo App Store, distributed exclusively in the Chinese market, could allow a local authenticated user to execute arbitrary code with elevated privileges.

Risk Assessment

The risk for the organization is the potential for privilege escalation by a local user, which could lead to system compromise and data confidentiality breach.

Recommendation

It is recommended to immediately apply patches provided by Lenovo and restrict local access to systems where Lenovo App Store is installed.

Other vulnerabilities in Lenovo App Store

CVE-2026-13103High
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market. This flaw could allow a local authenticated user to execute arbitrary code.

Original NVD description (English source)

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.