lenovo Vulnerability Advisory Catalog

Total 374 security vulnerabilities recorded for lenovo software and firmware.

← Back to All Vendors
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileg...

📅 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with ele...

📅 2023-11-08
CVSS 4.4 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elev...

📅 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privil...

📅 2023-11-08
CVSS 4.4 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privile...

📅 2023-11-08
CVSS 6.7 Dossier →
Component: lecloud

Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in infor...

📅 2023-11-08
CVSS 7.5 Dossier →
CVE-2023-5078 MEDIUM
Component: thinkpad_x13_gen_3_firmware

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware...

📅 2023-11-08
CVSS 6.7 Dossier →
CVE-2023-5075 MEDIUM
Component: ideapad_duet_3_10igl5_firmware

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privilege...

📅 2023-11-08
CVSS 6.7 Dossier →
CVE-2023-4891 MEDIUM
Component: view_driver

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service. ...

📅 2023-11-08
CVSS 5.5 Dossier →
Component: preload_directory

A privilege escalation vulnerability was reported in Lenovo preloaded devices deployed using Microsoft AutoPilot under a standard user account due to...

📅 2023-11-08
CVSS 7.3 Dossier →
Component: system_update

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with ele...

📅 2023-11-08
CVSS 7.8 Dossier →
Component: ideacentre_c5-14imb05_firmware

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to...

📅 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execut...

📅 2023-11-08
CVSS 6.7 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated priv...

📅 2023-11-08
CVSS 4.4 Dossier →
Component: ideacentre_c5-14imb05_firmware

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privi...

📅 2023-11-08
CVSS 6.7 Dossier →
CVE-2022-4575 MEDIUM
Component: thinkpad_25_firmware

A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with phys...

📅 2023-10-30
CVSS 6.7 Dossier →
CVE-2022-4574 MEDIUM
Component: thinkpad_x13_yoga_gen_2_firmware

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges t...

📅 2023-10-30
CVSS 6.7 Dossier →
CVE-2022-4573 MEDIUM
Component: thinkpad_x1_fold_gen_1_firmware

An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to exec...

📅 2023-10-30
CVSS 6.7 Dossier →
Component: thinkpad_e14_firmware

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to ...

📅 2023-10-30
CVSS 6.7 Dossier →
CVE-2022-3702 MEDIUM
Component: system_update_plugin

A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to...

📅 2023-10-27
CVSS 6.1 Dossier →
Component: system_update_plugin

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local att...

📅 2023-10-27
CVSS 7.8 Dossier →
CVE-2022-3700 MEDIUM
Component: system_update_plugin

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could all...

📅 2023-10-27
CVSS 6.1 Dossier →
Component: app_store_app

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to s...

📅 2023-10-27
CVSS 7.6 Dossier →
CVE-2022-3429 MEDIUM
Component: gm265dn_firmware

A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, tr...

📅 2023-10-27
CVSS 6.5 Dossier →
Page 3 of 16 (374 Total Records)