Lenovo Thinkpad vulnerabilities
10 vulnerabilities
Known vulnerabilities in Lenovo Thinkpad, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-3843lenovothinkpad_11e_3rd_gen_firmware+29
EPSS score0.28%
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-3599lenovoideapad_s940-14iwl_firmware+133EPSS score0.29%
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-3452lenovobios+1EPSS score0.27%
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-3718lenovothinkpad_11e_3rd_gen_firmware+39EPSS score0.22%
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.CVE-2022-1108lenovothinkpad bios+1EPSS score0.26%
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.CVE-2022-1107lenovothinkpad_11e_firmware+30EPSS score0.27%
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.CVE-2022-48189lenovothinkpad bios+85EPSS score0.19%
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2022-4575lenovothinkpad_25_firmware+13EPSS score0.18%
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.CVE-2022-4574lenovothinkpad bios+54EPSS score0.19%
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2023-5078lenovothinkpad bios+20EPSS score0.23%
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.