Lenovo Desktop vulnerabilities

16 vulnerabilities

Known vulnerabilities in Lenovo Desktop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2021-3519lenovodesktop bios+59
EPSS score
0.24%
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
6.7CVE-2023-43573lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43570lenovodesktop bios+111
EPSS score
0.23%
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.
4.4CVE-2023-43574lenovodesktop bios+111
EPSS score
0.23%
A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
6.7CVE-2023-43571lenovodesktop bios+111
EPSS score
0.24%
A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43578lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
4.4CVE-2023-43572lenovodesktop bios+111
EPSS score
0.22%
A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
6.7CVE-2023-43580lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43579lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43567lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43576lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43569lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
4.4CVE-2023-43568lenovodesktop bios+111
EPSS score
0.21%
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
6.7CVE-2023-43577lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43575lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
6.7CVE-2023-43581lenovodesktop bios+111
EPSS score
0.23%
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.