lenovo Vulnerability Advisory Catalog

Total 374 security vulnerabilities recorded for lenovo software and firmware.

← Back to All Vendors
Component: drivers_management

A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with...

๐Ÿ“… 2024-07-31
CVSS 7.8 Dossier →
Component: pcmanager

A vulnerability was reported in Lenovo PC Manager prior to versionย 2.8.90.11211 that could allow a local attacker to escalate privileges....

๐Ÿ“… 2024-07-31
CVSS 7.8 Dossier →
Component: pcmanager

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges....

๐Ÿ“… 2024-07-31
CVSS 7.8 Dossier →
CVE-2017-3772 MEDIUM
Component: pcmanager

A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot....

๐Ÿ“… 2024-07-31
CVSS 5.5 Dossier →
Component: nextscale_n1200_enclosure_firmware

A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute syste...

๐Ÿ“… 2024-04-15
CVSS 7.2 Dossier →
Component: thinksystem_sr670_v2_firmware

ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker wit...

๐Ÿ“… 2024-02-16
CVSS 2.0 Dossier →
CVE-2023-6450 MEDIUM
Component: app_store

An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a d...

๐Ÿ“… 2024-01-19
CVSS 5.5 Dossier →
CVE-2023-6044 MEDIUM
Component: vantage

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vanta...

๐Ÿ“… 2024-01-19
CVSS 6.3 Dossier →
Component: vantage

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary...

๐Ÿ“… 2024-01-19
CVSS 7.8 Dossier →
Component: tab_m8_hd_tb8505f_firmware

An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device id...

๐Ÿ“… 2024-01-19
CVSS 3.3 Dossier →
CVE-2023-5080 MEDIUM
Component: tab_m8_hd_tb8505f_firmware

A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and ...

๐Ÿ“… 2024-01-19
CVSS 6.8 Dossier →
CVE-2023-6540 MEDIUM
Component: browser_hd

A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that ...

๐Ÿ“… 2024-01-03
CVSS 6.5 Dossier →
Component: universal_device_client

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to e...

๐Ÿ“… 2024-01-03
CVSS 7.8 Dossier →
Component: ideacentre_c5-14imb05_firmware

A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM var...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to ...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM vari...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM vari...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM ...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to ex...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to ...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to exe...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to exec...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execu...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to exec...

๐Ÿ“… 2023-11-08
CVSS 6.7 Dossier →
Page 2 of 16 (374 Total Records)