CVE-2026-75940: Critical severity vulnerability
A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lenovo Health Android Applicationto a version that resolves this vulnerability.Fixed in 1.5.0
Event History
Frequently Asked Questions
Who is most likely to be exposed to this issue?
Users of the Lenovo Health Android Application distributed exclusively in the Chinese market are the affected population identified in the available information.
What does the reported severity indicate about exploitation?
The reported CVSS vector indicates network-based exploitation with low attack complexity, no required privileges, and no user interaction. The stated impact includes high confidentiality and integrity impact, with no availability impact reported.