Lenovo Bios vulnerabilities

• lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more A potential missing authentication vulnerability could allow a local privileged attacker to use... CVE-2026-10590 6.7 MediumJuly 16, 2026
• lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more A potential out of bounds write vulnerability could allow a local privileged attacker to execute... CVE-2026-10589 6.8 MediumJuly 16, 2026
• lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more A potential vulnerability could allow a local privileged attacker to disclose the address of... CVE-2026-10588 6.7 MediumJuly 16, 2026
• lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 more A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify... CVE-2026-10587 6.8 MediumJuly 16, 2026
• lenovo e14 gen 4 (type 21e3, 21e4) laptops (thinkpad) bios, e14 gen 5 (type 21jr, 21js) laptop (thinkpad) bios, e14 gen 6 (type 21m3, 21m4) laptops (thinkpad) bios +105 more +107 more During an internal security assessment, a potential out-of-bounds write vulnerability was... CVE-2025-10238 8.4 HighJune 10, 2026
• lenovo l13 (type 20r3, 20r4) laptops (thinkpad) bios, l13 2-in-1 gen 6 (type 21r7, 21r8) laptops (thinkpad) bios, l13 gen 4 (type 21fg, 21fh) laptop (thinkpad) bios +92 more +94 more During an internal security assessment, a potential vulnerability was discovered in some ThinkPad... CVE-2025-10237 8.4 HighJune 10, 2026
• lenovo thinkpad p14s gen 5 bios, thinkpad p15v gen 3 bios, thinkpad p16v gen 1 bios +5 more +7 more A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that... CVE-2026-0940 8.4 HighMarch 11, 2026
• lenovo thinkpad l13 gen 6 2 in 1 bios, thinkpad l13 gen 6 bios, thinkpad l14 gen 6 bios +1 more +3 more A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and... CVE-2026-0421 7.0 HighJanuary 14, 2026
• lenovo hx1331 certified node (thinkagile) bios, hx2330 appliance (thinkagile) bios, hx2331 certified node (thinkagile) bios +112 more +114 more An internal product security audit discovered a UEFI SMM (System Management Mode) callout... CVE-2024-45105 6.7 MediumSeptember 13, 2024
• lenovo 10w (type 82st, 82su) laptop (lenovo) bios, 10w firmware, l390 (type 20nr, 20ns) laptops (thinkpad) bios +2 more +4 more A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could... CVE-2024-7756 6.8 MediumSeptember 13, 2024
• lenovo p360 workstation (thinkstation) bios, st50 (thinksystem) bios, st50 v2 (thinksystem) bios +7 more +9 more A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and... CVE-2024-4550 6.7 MediumSeptember 13, 2024
• lenovo 100w gen 3 laptop (lenovo) bios, 100w gen 4 laptop (lenovo) bios, 100w gen 3 firmware +76 more +78 more A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that... CVE-2024-3100 6.7 MediumSeptember 13, 2024
• lenovo desktop bios, smart edge bios, thinkstation bios A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and... CVE-2023-25494 6.7 MediumApril 5, 2024
• lenovo bios A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart... CVE-2023-25493 6.7 MediumApril 5, 2024
• lenovo notebook, notebook bios +1 more A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may... CVE-2023-5912 6.7 MediumApril 5, 2024
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may... CVE-2023-43577 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may... CVE-2023-43576 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products... CVE-2023-43575 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo... CVE-2023-43574 4.4 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo... CVE-2023-43573 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products... CVE-2023-43572 4.4 MediumNovember 8, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +59 more +61 more A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local... CVE-2023-45079 6.7 MediumNovember 8, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +59 more +61 more A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a... CVE-2023-45078 6.7 MediumNovember 8, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +59 more +61 more A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local... CVE-2023-45077 6.7 MediumNovember 8, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +59 more +61 more A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local... CVE-2023-45076 6.7 MediumNovember 8, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +59 more +61 more A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local... CVE-2023-45075 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may... CVE-2023-43581 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that... CVE-2023-43580 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may... CVE-2023-43579 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may... CVE-2023-43578 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products... CVE-2023-43571 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A potential vulnerability was reported in the SMI callback function of the OemSmi driver that... CVE-2023-43570 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may... CVE-2023-43569 6.7 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop... CVE-2023-43568 4.4 MediumNovember 8, 2023
• lenovo desktop bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +109 more +111 more A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop... CVE-2023-43567 6.7 MediumNovember 8, 2023
• lenovo thinkpad, thinkpad bios, thinkpad l13 gen 2 firmware +19 more +21 more A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker... CVE-2023-5078 6.7 MediumNovember 8, 2023
• lenovo thinkpad bios, thinkpad 25 firmware, thinkpad l560 firmware +11 more +13 more A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of... CVE-2022-4575 6.7 MediumOctober 30, 2023
• lenovo thinkpad, thinkpad bios, thinkpad e14 firmware +84 more +86 more An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an... CVE-2022-48189 6.7 MediumOctober 30, 2023
• lenovo thinkpad, thinkpad bios, thinkpad l14 firmware +53 more +55 more An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an... CVE-2022-4574 6.7 MediumOctober 30, 2023
• lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 more A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS... CVE-2022-48183 6.1 MediumOctober 9, 2023
• lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 more A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS... CVE-2022-48182 6.1 MediumOctober 9, 2023
• lenovo thinkpad t14s gen 3 bios, thinkpad x13 gen3 bios, thinkpad t14s gen 3 firmware +1 more +3 more A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS... CVE-2022-3728 6.1 MediumOctober 9, 2023
• lenovo notebook, bios, d330-10igl firmware +24 more +26 more A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo... CVE-2022-3431 6.7 MediumOctober 9, 2023
• lenovo ideacentre 510s-07icb firmware, ideacentre 510s-07ick firmware, ideacentre 720-18apr firmware +25 more +27 more A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and... CVE-2022-48188 6.7 MediumJune 5, 2023
• lenovo ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware, ideacentre 3 07ach7 firmware +112 more +114 more An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models... CVE-2022-48181 6.7 MediumJune 5, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +285 more +287 more A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local... CVE-2022-40137 6.7 MediumJanuary 30, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +145 more +147 more An information leak vulnerability in SMI Handler used to configure platform settings over WMI in... CVE-2022-40136 4.4 MediumJanuary 30, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +134 more +136 more An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models... CVE-2022-40135 4.4 MediumJanuary 30, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +323 more +325 more An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models... CVE-2022-40134 4.4 MediumJanuary 30, 2023
• lenovo bios, ideapad y700-14isk firmware +1 more A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK... CVE-2022-3432 6.7 MediumJanuary 23, 2023
• Show olderLoading…