CVE-2026-9046 — Lenovo / Legion Zone

CVE-2026-9046

Lenovo / Legion Zone PUBLISHED

Description (CNA)

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lenovo / Legion Zone	affected 0 before 2.0.26
Lenovo / App Store	affected 0 before 9.0.29

CWE

CWE-277

References

https://iknow.lenovo.com.cn/detail/441420

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.