CVE-2026-1652

MEDIUM 6.1

CVSS Score

6.1

EPSS Score

0.0%

EPSS Percentile

0th

A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt memory and cause a Windows blue screen error.

CWE	CWE-122
Vendor	lenovo
Product	smart connect
Published	Mar 11, 2026
Last Updated	Mar 12, 2026

Stay Ahead of the Next One

Get instant alerts for lenovo smart connect

Be the first to know when new medium vulnerabilities affecting lenovo smart connect are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Affected Versions

Lenovo / Smart Connect

0 < 09.0.1.002.000

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.lenovo.com: https://support.lenovo.com/us/en/product_security/LEN-209683

Credits

Lenovo thanks Yaron Dinkin & Eyal Kraft from Hexaplex AI for reporting these issues.