CVE-2025-8485 HIGH

CVE-2025-8485

Vendor Lenovo

Product App Store

Weakness CWE-276

Published November 12, 2025

Last update November 12, 2025

View on NVD All CVEs

CVSS base score

7.0/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.

Key dates

02Disclosure timeline

November 12, 2025 CVE published

November 12, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-8485 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/276.html

Related vulnerabilities

CVE-2025-8485

01Description

02Disclosure timeline

03References

04Related CVE