CVE-2026-13104CWE-250

CVE-2026-13104

High · published July 16, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.4th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2026-07-16T21:16Z
References (1)
https://iknow.lenovo.com.cn/detail/441419 · [email protected]
EPSS history
Timeline
  • 16 JUL 16:49Z
    A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to…
    cvelistv5