Is CVE-2026-9046 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-9046?

CVE-2026-9046 has a CVSS v3 severity of HIGH (7).

Back

CVE-2026-9046

Description

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.