CVE-2026-13104
High · 7.3CVSS
7.3
EPSS
0.2%
Published
Jul 16, 2026
CISA due date
—
The record
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-40573 NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. CWE-250
- CVE-2025-30046 In the CGM CLININET application server, multiple processes responsible for HL7… CWE-250
- CVE-2026-91335 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… CWE-250
- CVE-2026-104795 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that… CWE-250
- CVE-2026-87709 Improper access control in Windows Host Guardian Service allows an authorized attacker to… CWE-250
- CVE-2026-107176 A flaw was found in the cluster-samples-operator. CWE-250
- CVE-2026-92574 A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a… CWE-250
- CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250