lenovo Vulnerability Advisory Catalog

Total 374 security vulnerabilities recorded for lenovo software and firmware.

← Back to All Vendors
Component: thinkagile_vx3331_firmware

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem deni...

📅 2023-01-30
CVSS 7.2 Dossier →
CVE-2022-3432 MEDIUM
Component: ideapad_y700-14isk_firmware

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an att...

📅 2023-01-26
CVSS 6.7 Dossier →
CVE-2022-1892 MEDIUM
Component: 100e_2nd_gen_firmware

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary...

📅 2023-01-26
CVSS 6.7 Dossier →
CVE-2022-1891 MEDIUM
Component: thinkbook_14-iml_firmware

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary...

📅 2023-01-26
CVSS 6.7 Dossier →
CVE-2022-1890 MEDIUM
Component: thinkbook_14-iml_firmware

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code....

📅 2023-01-26
CVSS 6.7 Dossier →
CVE-2022-4816 MEDIUM
Component: safecenter

A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the application....

📅 2023-01-23
CVSS 6.2 Dossier →
CVE-2022-3430 MEDIUM
Component: d330-10igl_firmware

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify se...

📅 2023-01-23
CVSS 6.7 Dossier →
CVE-2022-1109 MEDIUM
Component: leyun

An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service....

📅 2023-01-20
CVSS 5.5 Dossier →
CVE-2022-4435 MEDIUM
Component: thinkpad_x13s_firmware

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with eleva...

📅 2023-01-05
CVSS 6.7 Dossier →
CVE-2022-4434 MEDIUM
Component: thinkpad_x13s_firmware

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause info...

📅 2023-01-05
CVSS 6.7 Dossier →
CVE-2022-4433 MEDIUM
Component: thinkpad_x13s_firmware

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated pri...

📅 2023-01-05
CVSS 6.7 Dossier →
CVE-2022-4432 MEDIUM
Component: thinkpad_x13s_firmware

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated pri...

📅 2023-01-05
CVSS 6.7 Dossier →
Component: ideacentre_510-15ikl_firmware

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0....

📅 2022-12-26
CVSS 7.8 Dossier →
Component: elan_miniport_touchpad_driver

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system cras...

📅 2022-11-07
CVSS 4.7 Dossier →
Component: pcmanager

A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafte...

📅 2022-08-23
CVSS 7.3 Dossier →
CVE-2022-1110 MEDIUM
Component: smart_standby_driver

A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service....

📅 2022-05-18
CVSS 5.5 Dossier →
Component: a1_firmware

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operati...

📅 2022-05-18
CVSS 8.0 Dossier →
Component: a1_firmware

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account....

📅 2022-05-18
CVSS 6.3 Dossier →
Component: a1_firmware

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allo...

📅 2022-05-18
CVSS 8.8 Dossier →
Component: a1_firmware

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to ...

📅 2022-05-18
CVSS 6.8 Dossier →
Component: a1_firmware

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retriev...

📅 2022-05-18
CVSS 4.3 Dossier →
Component: system_interface_foundation

A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to ...

📅 2022-05-18
CVSS 7.8 Dossier →
CVE-2021-3956 MEDIUM
Component: xclarity_controller

A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting ...

📅 2022-05-18
CVSS 4.3 Dossier →
Component: system_interface_foundation

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 tha...

📅 2022-05-18
CVSS 7.8 Dossier →
Page 6 of 16 (374 Total Records)