Executive brief
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.
Junglewise Threat Intelligence
CVE-2025-12046: A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated us
CVE-2025-12046 · Severity: high · CVSS 7.8 · Published 2025-12-10