PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-9046 Lenovo CVE debrief

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market. When installed on a non-system partition, it could allow a local user to execute arbitrary code. This vulnerability has a CVSS score of 7.3 and is classified as HIGH severity. Users and administrators should be aware of the potential risks and take appropriate measures to mitigate them.

Vendor
Lenovo
Product
Legion Zone
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-16
Original CVE updated
2026-07-16
Advisory published
2026-07-16
Advisory updated
2026-07-16

Who should care

Users of Legion Zone and Lenovo App Store Windows applications, especially those installed on non-system partitions, should be aware of this potential vulnerability. Administrators and security teams should review the affected products and versions in their environments and prioritize patching or updating them. Vulnerability management and security teams should also monitor for any suspicious local activity and implement compensating controls as needed.

Technical summary

The vulnerability, with a CVSS score of 7.3 and HIGH severity, was reported in Legion Zone and Lenovo App Store Windows applications distributed exclusively in the Chinese market. When installed on a non-system partition, it could allow local users to execute arbitrary code. The affected products and versions should be identified, and patches or updates provided by the vendor should be applied. Compensating controls, such as restricting write permissions, may be necessary for exposed systems.

Defensive priority

High priority should be given to updating or patching Legion Zone and Lenovo App Store Windows applications, especially if installed on non-system partitions. Administrators should also review compensating controls for exposed systems and monitor for suspicious activity.

Recommended defensive actions

  • Inventory and verify installations of Legion Zone and Lenovo App Store Windows applications.
  • Check if applications are installed on non-system partitions.
  • Apply patches or updates provided by the vendor.
  • Monitor for any suspicious local activity.
  • Implement compensating controls, such as restricting write permissions.
  • Review official advisories for specific guidance on affected products and versions.
  • Track exceptions and retest remediated assets to ensure vulnerability closure.

Evidence notes

The CVE record was published on 2026-07-16T17:16:59.100Z and was last modified on 2026-07-16T19:16:51.490Z. The NVD entry is currently Deferred. Evidence is limited to public sources and may not reflect the full scope or impact of the vulnerability. Defenders should verify the affected products and versions in their environments and review official advisories for specific guidance.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-16T17:16:59.100Z and has not been modified since then. The NVD entry is currently Deferred.