Lenovo Thinkpad X1 Carbon Gen 7 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Lenovo Thinkpad X1 Carbon Gen 7, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2021-3599lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.29%
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.5.5CVE-2021-3786lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.23%
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.