Skip to content

Lenovo Bios vulnerabilities

lenovo bios, d330-10igl firmware, ideapad 5 pro 16arh7 firmware +42 more +44 moreA potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may...CVE-2022-34306.7 MediumJanuary 23, 2023
lenovo 100e 2nd gen firmware, 100w gen 3 firmware, 13w yoga firmware +68 more +70 moreA buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow...CVE-2022-18926.7 MediumJanuary 23, 2023
lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow...CVE-2022-18916.7 MediumJanuary 23, 2023
lenovo bios, thinkbook 14-iil firmware, thinkbook 14-iml firmware +4 more +6 moreA buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an...CVE-2022-18906.7 MediumJanuary 23, 2023
dell bios, edge gateway 3000 firmware, edge gateway 5000 firmware +1 more +3 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...CVE-2022-324907.5 HighJanuary 18, 2023
dell bios, g5 se 5505 firmware, inspiron 27 7775 firmware +24 more +26 morePrior Dell BIOS versions contain an improper input validation vulnerability. A local...CVE-2022-344607.5 HighJanuary 18, 2023
dell bios, g5 se 5505 firmware, inspiron 27 7775 firmware +24 more +26 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...CVE-2022-343937.5 HighJanuary 18, 2023
lenovo thinkpad bios, thinkpad x1 fold gen 1 firmware +1 moreA potential vulnerability due to improper buffer validation in the SMI handler...CVE-2022-11086.7 MediumApril 22, 2022
lenovo thinkpad bios, thinkpad 11e firmware, thinkpad 11e yoga firmware +28 more +30 moreA potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some...CVE-2022-11076.7 MediumApril 22, 2022
lenovo bios, c340-14iml firmware, c340-15iml firmware +60 more +62 moreA potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in...CVE-2021-42126.7 MediumApril 22, 2022
lenovo bios, a340-22icb firmware, a340-22ick firmware +51 more +53 moreA potential vulnerability in the SMI callback function used in the SMBIOS event log driver in...CVE-2021-42116.7 MediumApril 22, 2022
lenovo a540-24icb firmware, a540-27icb firmware, bios +30 more +32 moreA potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo...CVE-2021-42106.7 MediumApril 22, 2022
lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +103 more +105 moreA potential vulnerability by a driver used during manufacturing process on some consumer Lenovo...CVE-2021-3972Public exploit6.7 MediumApril 22, 2022
lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +71 more +73 moreA potential vulnerability by a driver used during older manufacturing processes on some consumer...CVE-2021-39716.7 MediumApril 22, 2022
lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +103 more +105 moreA potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some...CVE-2021-39706.7 MediumApril 22, 2022
lenovo thinkpad bios, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware +27 more +29 moreA potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow...CVE-2021-38436.7 MediumNovember 12, 2021
lenovo ideapad s940-14iwl firmware, ideapad yoga s940-14iwl firmware, notebook and thinkpad bios +131 more +133 moreA potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo...CVE-2021-37864.4 MediumNovember 12, 2021
lenovo thinkcentre and thinkstation bios, thinkcentre e93 firmware, thinkcentre m4500q firmware +18 more +20 moreA potential vulnerability in the SMI callback function that saves and restore boot script tables...CVE-2021-37196.7 MediumNovember 12, 2021
lenovo thinkpad bios, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware +37 more +39 moreA denial of service vulnerability was reported in some ThinkPad models that could cause a system...CVE-2021-37184.3 MediumNovember 12, 2021
lenovo ideapad s940-14iwl firmware, ideapad yoga s940-14iwl firmware, thinkpad bios +131 more +133 moreA potential vulnerability in the SMI callback function used to access flash device in some...CVE-2021-35996.7 MediumNovember 12, 2021
lenovo desktop bios, ideacentre 3-07imb05 firmware, ideacentre 310s-08igm firmware +57 more +59 moreA vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access...CVE-2021-35196.4 MediumNovember 12, 2021
lenovo 100e 2nd gen firmware, 300e 2nd gen firmware, ideapad 1-11ada05 firmware +19 more +21 moreA vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with...CVE-2021-36146.4 MediumJuly 16, 2021
lenovo bios, 730s-13iml firmware, ideacentre aio 5-24imb05 firmware +19 more +21 moreSome Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel...CVE-2021-34536.8 MediumJuly 16, 2021
lenovo bios, thinkpad bios +1 moreA potential vulnerability in the system shutdown SMI callback function in some ThinkPad models...CVE-2021-34526.7 MediumJuly 16, 2021
lenovo bios, notebook firmware +1 moreA potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in...CVE-2020-83546.4 MediumNovember 11, 2020
lenovo bios, qitian 4500 firmware, qitian b4550 firmware +14 more +16 moreIn some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect...CVE-2020-83522.4 LowNovember 11, 2020
lenovo 63 firmware, bios, h50-30g firmware +25 more +27 moreA potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo...CVE-2020-83336.4 MediumSeptember 24, 2020
lenovo thinkpad a285 bios, thinkpad a485 bios, thinkpad t495 bios +9 more +11 moreThe BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up...CVE-2020-83356.1 MediumSeptember 1, 2020
lenovo bios, intel core i5-7200u firmware, core i5-7260u firmware +77 more +79 moreImproper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM)...CVE-2020-05297.8 HighJune 15, 2020
lenovo bios, intel core i5-7200u firmware, core i5-7260u firmware +77 more +79 moreImproper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core...CVE-2020-05287.8 HighJune 15, 2020
lenovo bios, thinkpad e14 firmware, thinkpad e15 firmware +36 more +38 moreLenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent...CVE-2020-83366.4 MediumJune 9, 2020
lenovo bios, thinkpad a275 firmware, thinkpad a285 firmware +5 more +7 moreThe BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485,...CVE-2020-83346.1 MediumJune 9, 2020
lenovo 14iwl firmware, 330-14ast firmware, 330-15ast firmware +170 more +172 moreA potential vulnerability in the SMI callback function used in the Legacy SD driver in some...CVE-2020-83236.4 MediumJune 9, 2020
lenovo 14iwl firmware, 330-14ast firmware, 330-15ast firmware +49 more +51 moreA potential vulnerability in the SMI callback function used in the Legacy USB driver in some...CVE-2020-83226.4 MediumJune 9, 2020
lenovo 130-14ast firmware, 130-14ikb firmware, 130-15ast firmware +170 more +172 moreA potential vulnerability in the SMI callback function used in the System Lock Preinstallation...CVE-2020-83216.4 MediumJune 9, 2020
lenovo bios, thinkpad 11e firmware, thinkpad 11e yoga gen 6 firmware +98 more +100 moreAn internal shell was included in BIOS image in some ThinkPad models that could allow escalation...CVE-2020-83206.4 MediumJune 9, 2020
lenovo bios, 510-15ikl firmware, 510s-08ikl firmware +180 more +182 moreLenovo was notified of a potential denial of service vulnerability, affecting various versions of...CVE-2019-61905.0 MediumFebruary 14, 2020
tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreInteger overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in...CVE-2014-48596.8 MediumJanuary 31, 2020
tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreMultiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update...CVE-2014-48606.8 MediumJanuary 31, 2020
lenovo bios, 20a7 firmware, 20a8 firmware +146 more +148 moreA vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow...CVE-2019-61716.4 MediumAugust 19, 2019
lenovo bios, 330-14igm firmware, 330-15igm firmware +175 more +177 moreIn Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this...CVE-2019-61563.3 LowApril 10, 2019
lenovo flex system x240 m5 bios, flex system x280 x6 bios, flex system x480 x6 bios +9 more +11 moreSome Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system...CVE-2017-37756.4 MediumMay 4, 2018
lenovo thinkpad 10 ella 2, thinkpad 10 ella 2 bios, thinkpad 11e beema +146 more +148 moreA privilege escalation vulnerability was identified in Lenovo Active Protection System for...CVE-2017-37567.8 HighAugust 18, 2017
lenovo bios, lenovo group ltd. notebook bios +1 moreSome Lenovo brand notebook systems do not have write protections properly configured in the...CVE-2017-37546.7 MediumJuly 17, 2017
lenovo flex system x240 m5 bios, flex system x280 m6 bios, flex system x480 x6 bios +9 more +11 moreThe BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of...CVE-2016-82264.9 MediumJanuary 26, 2017
lenovo group ltd. thinkpad systems, lenovo thinkpad 10 ella 2 bios, thinkpad 11e beema bios +72 more +74 moreA vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad...CVE-2016-82224.4 MediumNovember 30, 2016
lenovo bios, notebook 110 14ibr bios, notebook 110 15ibr bios +27 more +29 moreA vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...CVE-2016-82244.4 MediumNovember 29, 2016
lenovo biosThe BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s...CVE-2016-52477.8 HighSeptember 22, 2016
lenovo bios efi driverLenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System...CVE-2016-57298.2 HighJune 30, 2016