CVE-2026-1652CWE-122

CVE-2026-1652

Medium · published March 12, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and cause a Windows blue screen error.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00098 · 0.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-03-12T01:16Z
Affected products (1)
ProductVersionsFixed in
lenovo/smart_connect< 09.0.1.002.00009.0.1.002.000
References (1)
https://support.lenovo.com/us/en/product_security/LEN-209683 · [email protected]
EPSS history
Timeline
  • 11 MAR 20:21Z
    A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to…
    cvelistv5