CVE-2026-1653
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect. It could allow a local authenticated user to cause a Windows blue screen error.
Risk Assessment
The risk includes system crashes (BSOD) on workstations, potentially leading to downtime and loss of productivity. The attack requires local access but could be used to destabilize the environment.
Recommendation
It is recommended to immediately apply the Lenovo Virtual Bus driver update provided by the vendor. Also, restrict local access to systems and monitor logs for unusual events.
Other vulnerabilities in Lenovo Virtual Bus driver
Original NVD description (English source)
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue screen error.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS