Lenovo

China Proprietary www.lenovo.com ↗
C
CAUTION
132
Total CVEs
36
Crit / High
36
Medium
10%
Unpatched
0%
Patched
6.7
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
10%
Under Review
90%
✓ 0 patched ✗ 27 unpatched ~ 255 under review
▸ Intelligence by Audience
PoC Available
8 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"lenovo" port:443
org:"Lenovo" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-14371 1.23% exploitation probability
CVE-2026-16793 0.52% exploitation probability
CVE-2026-75940 0.29% exploitation probability
CVE-2026-63426 0.16% exploitation probability
CVE-2026-63425 0.15% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
132
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
10%
Avg CVSS score
6.7
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-12
Security Risk Score (for investors)
MED
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Hackers Can Weaponize Lenovo Driver to Terminate EDR Processes - CyberSecurityNews
CyberSecurityNews 2026-05-22
Lenovo signs the Cybersecurity and Infrastructure Security Agency ‘Secure by Design’ pledge - Lenovo StoryHub
Lenovo StoryHub 2024-05-09
How does Doug Fisher secure AI at Lenovo? - analyticsindiamag.com
analyticsindiamag.com 2025-11-03
Millions of Lenovo Laptops Contain Firmware-Level Vulnerabilities - Dark Reading
Dark Reading 2022-04-20
DOD continues to buy products it knows have cybersecurity vulnerabilities - FedScoop
FedScoop 2019-07-31
Lenovo Firmware Vulnerabilities Allow Persistent Implant Deployment - SecurityWeek
SecurityWeek 2025-07-29
▸ Recent CVEs showing 20 of 282
CVE IDSeverityPatchEPSSDate
CVE-2026-75940 9.1 CRITICAL UNKNOWN / UNPATCHED 0.29% 2026-09-10
CVE-2026-18994 7.1 HIGH UNKNOWN / UNPATCHED 0.10% 2026-09-10
CVE-2026-63427 7.8 HIGH UNKNOWN / UNPATCHED 0.14% 2026-09-10
CVE-2026-11813 7.8 HIGH UNKNOWN / UNPATCHED 0.10% 2026-09-10
CVE-2026-63426 7.1 HIGH PATCH UNDER REVIEW 0.16% 2026-08-13
CVE-2026-63424 7.3 HIGH PATCH UNDER REVIEW 0.13% 2026-08-13
CVE-2026-6387 PoC 7.0 HIGH UNKNOWN / UNPATCHED — 2026-08-13
CVE-2026-63423 7.8 HIGH UNKNOWN / UNPATCHED — 2026-08-13
CVE-2026-15994 PoC 7.0 HIGH UNKNOWN / UNPATCHED — 2026-08-13
CVE-2026-63425 PoC 7.8 HIGH PATCH UNDER REVIEW 0.15% 2026-08-13
CVE-2026-16793 PoC 8.8 HIGH PATCH UNDER REVIEW 0.52% 2026-08-04
CVE-2026-16792 PoC 6.1 MEDIUM PATCH UNDER REVIEW 0.07% 2026-08-04
CVE-2026-16791 PoC 3.9 LOW PATCH UNDER REVIEW 0.09% 2026-08-04
CVE-2026-9046 7.3 HIGH PATCH UNDER REVIEW 0.08% 2026-07-16
CVE-2026-6511 6.8 MEDIUM PATCH UNDER REVIEW 0.09% 2026-07-16
CVE-2026-14371 8.8 HIGH PATCH UNDER REVIEW 1.23% 2026-07-16
CVE-2026-13104 7.0 HIGH PATCH UNDER REVIEW 0.11% 2026-07-16
CVE-2026-13103 7.0 HIGH PATCH UNDER REVIEW 0.13% 2026-07-16
CVE-2026-10588 PoC 6.7 MEDIUM PATCH UNDER REVIEW 0.11% 2026-07-16
CVE-2026-10590 PoC 6.7 MEDIUM PATCH UNDER REVIEW 0.11% 2026-07-16
View all 282 CVEs for Lenovo →
▸Intel
HQBeijing, China
Founded1984
Employees77,000
CEOYang Yuanqing
CountryChina
LicenseProprietary
Trust ScoreC — CAUTION
Max CVSS8.8
Last Updated2026-07-12
▸Top Weaknesses
CWE-427
Unknown Weakness Type
18 occurrences in Lenovo CVEs (14% of total)
CWE-427 ⓘ
18
CWE-269
Improper Privilege Management
9 occurrences in Lenovo CVEs (7% of total)
CWE-269 ⓘ
9
CWE-276
Incorrect Default Permissions
8 occurrences in Lenovo CVEs (6% of total)
CWE-276 ⓘ
8
CWE-20
Unknown Weakness Type
7 occurrences in Lenovo CVEs (5% of total)
CWE-20 ⓘ
7
CWE-400
Uncontrolled Resource Consumption
7 occurrences in Lenovo CVEs (5% of total)
CWE-400 ⓘ
7
CWE-284
Improper Access Control
4 occurrences in Lenovo CVEs (3% of total)
CWE-284 ⓘ
4
CWE-120
Buffer Copy Without Size Check
4 occurrences in Lenovo CVEs (3% of total)
CWE-120 ⓘ
4
CWE-401
Unknown Weakness Type
3 occurrences in Lenovo CVEs (2% of total)
CWE-401 ⓘ
3
▸Company Profile

Lenovo is a multinational technology company headquartered in Beijing, China, and Morrisville, North Carolina, best known for its ThinkPad laptops, personal computers, and enterprise hardware. Its cybersecurity relevance stems from the widespread deployment of its devices in corporate and government environments, with vulnerabilities in firmware, drivers, and pre-installed software posing significant supply chain risks.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -36% better
CVE count 2026 vs 2025:  45 → 29 CVEs
Patch Speed ⓘ Poor (>65% open)
10% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€586K
Est. GDPR High
€5.9M

Based on 0 critical CVEs, 0 CISA KEV, 98% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Lenovo C valtersit.com