This page lists publicly disclosed CVE vulnerabilities affecting lenovo universal_device_client (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-6026 | An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data. | [email protected] | 2.3 | 0.08% | 2025-10-15 | 2026-06-17 |
| CVE-2023-6338 | Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges. | [email protected] | 7.8 | 0.21% | 2024-01-03 | 2026-06-17 |
| CVE-2023-3078 | An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges. | [email protected] | 7.8 | 0.21% | 2023-08-17 | 2026-06-17 |