CVE-2026-75941: High severity Lenovo Legion Zone vulnerability
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lenovo Legion Zoneto a version that resolves this vulnerability.Fixed in 2.0.28.8182
Event History
Frequently Asked Questions
Who is exposed to this issue?
The affected application is Lenovo Legion Zone, which is distributed exclusively in the Chinese market. Exploitation is limited to attackers on the same logical network as the affected system.
What access does an attacker need to exploit it?
An attacker needs access to the same logical network and low-level privileges. No user interaction is required.
What is the potential impact of successful exploitation?
A successful attacker could execute arbitrary code and potentially affect the confidentiality, integrity, and availability of the affected system.