Lenovo Thinkpad vulnerabilities

• lenovo 100w gen 4 laptop (lenovo) elan trackpoint driver for windows 11 (version 22h2 or later) - lenovo 100w gen 4, 300w yoga gen 4, 500w yoga gen 4, 100w gen 5 (type 83ld, 83le) laptop (lenovo) elan trackpoint driver for windows 11 (version 23h2 or later) - lenovo 100w gen 5, 300w 2-in-1 gen 5, 500w 2-in-1 gen 5, 11e yoga gen 6 (type 20se, 20sf) laptop (thinkpad) elan clickpad driver for windows 11 (version 21h2 or later), 10 (version 1809 or later) - thinkpad yoga 11e 6th gen +259 more +261 more ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that,... CVE-2026-14256 5.7 MediumAugust 13, 2026
• lenovo e14 gen 4 (type 21e3, 21e4) laptops (thinkpad) bios, e14 gen 5 (type 21jr, 21js) laptop (thinkpad) bios, e14 gen 6 (type 21m3, 21m4) laptops (thinkpad) bios +105 more +107 more During an internal security assessment, a potential out-of-bounds write vulnerability was... CVE-2025-10238 8.4 HighJune 10, 2026
• lenovo l13 (type 20r3, 20r4) laptops (thinkpad) bios, l13 2-in-1 gen 6 (type 21r7, 21r8) laptops (thinkpad) bios, l13 gen 4 (type 21fg, 21fh) laptop (thinkpad) bios +92 more +94 more During an internal security assessment, a potential vulnerability was discovered in some ThinkPad... CVE-2025-10237 8.4 HighJune 10, 2026
• lenovo thinkpad p14s gen 5 bios, thinkpad p15v gen 3 bios, thinkpad p16v gen 1 bios +5 more +7 more A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that... CVE-2026-0940 8.4 HighMarch 11, 2026
• lenovo thinkpad l13 gen 6 2 in 1 bios, thinkpad l13 gen 6 bios, thinkpad l14 gen 6 bios +1 more +3 more A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and... CVE-2026-0421 7.0 HighJanuary 14, 2026
• lenovo elliptic human presence detection device driver for t14 gen 4 (type 21k3, 21k4), elliptic human presence detection device driver for t14 gen 5 (type 21ml, 21mm), elliptic human presence detection device driver for t14s gen 5 (type 21ls, 21lt) +30 more +32 more An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that... CVE-2025-0886 Public exploit 8.5 HighJuly 17, 2025
• lenovo 10w (type 82st, 82su) laptop (lenovo) bios, 10w firmware, l390 (type 20nr, 20ns) laptops (thinkpad) bios +2 more +4 more A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could... CVE-2024-7756 6.8 MediumSeptember 13, 2024
• lenovo thinkpad, thinkpad bios, thinkpad l13 gen 2 firmware +19 more +21 more A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker... CVE-2023-5078 6.7 MediumNovember 8, 2023
• lenovo thinkpad bios, thinkpad 25 firmware, thinkpad l560 firmware +11 more +13 more A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of... CVE-2022-4575 6.7 MediumOctober 30, 2023
• lenovo thinkpad, thinkpad bios, thinkpad e14 firmware +84 more +86 more An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an... CVE-2022-48189 6.7 MediumOctober 30, 2023
• lenovo thinkpad, thinkpad bios, thinkpad l14 firmware +53 more +55 more An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an... CVE-2022-4574 6.7 MediumOctober 30, 2023
• lenovo thinkpad x1 fold gen 1, thinkpad x1 fold gen 1 firmware +1 more An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an... CVE-2022-4573 6.7 MediumOctober 30, 2023
• ellipticlabs virtual lock sensor, lenovo elliptic labs virtual lock sensor, thinkpad t14 gen 3 +1 more +3 more A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that... CVE-2023-3112 7.8 HighOctober 24, 2023
• lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 more A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS... CVE-2022-48183 6.1 MediumOctober 9, 2023
• lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 more A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS... CVE-2022-48182 6.1 MediumOctober 9, 2023
• lenovo thinkpad t14s gen 3 bios, thinkpad x13 gen3 bios, thinkpad t14s gen 3 firmware +1 more +3 more A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS... CVE-2022-3728 6.1 MediumOctober 9, 2023
• lenovo thinkpad, thinkpad p14s gen 2 firmware, thinkpad p15s gen 2 firmware +2 more +4 more A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen... CVE-2023-4030 8.4 HighAugust 17, 2023
• lenovo thinkpad, k14 type 21cu firmware, k14 type 21cv firmware +24 more +26 more A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad... CVE-2023-4029 6.7 MediumAugust 17, 2023
• lenovo thinkpad, thinkpad e14, thinkpad e14 firmware +87 more +89 more A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker... CVE-2023-2290 6.4 MediumJune 26, 2023
• lenovo thinkpad hybrid usb-c with usb-a dock firmware update tool, thinkpad hybrid usb-c with usb-a dock firmware +1 more A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware... CVE-2022-4569 7.8 HighJune 5, 2023
• lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +323 more +325 more An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models... CVE-2022-40134 4.4 MediumJanuary 30, 2023
• lenovo thinkpad x13s, thinkpad x13s firmware +1 more A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS... CVE-2022-4435 6.7 MediumJanuary 5, 2023
• lenovo thinkpad x13s, thinkpad x13s firmware +1 more A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a... CVE-2022-4434 6.7 MediumJanuary 5, 2023
• lenovo thinkpad x13s, thinkpad x13s firmware +1 more A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe... CVE-2022-4433 6.7 MediumJanuary 5, 2023
• lenovo thinkpad x13s, thinkpad x13s firmware +1 more A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe... CVE-2022-4432 6.7 MediumJanuary 5, 2023
• lenovo aio300-23isu firmware, aio310-20iap firmware, aio510-22ish firmware +133 more +135 more Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and... CVE-2019-19705 7.8 HighDecember 26, 2022
• lenovo thinkpad bios, thinkpad x1 fold gen 1 firmware +1 more A potential vulnerability due to improper buffer validation in the SMI handler... CVE-2022-1108 6.7 MediumApril 22, 2022
• lenovo thinkpad bios, thinkpad 11e firmware, thinkpad 11e yoga firmware +28 more +30 more A potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some... CVE-2022-1107 6.7 MediumApril 22, 2022
• lenovo thinkpad bios, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware +27 more +29 more A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow... CVE-2021-3843 6.7 MediumNovember 12, 2021
• lenovo ideapad s940-14iwl firmware, ideapad yoga s940-14iwl firmware, notebook and thinkpad bios +131 more +133 more A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo... CVE-2021-3786 4.4 MediumNovember 12, 2021
• lenovo thinkpad bios, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware +37 more +39 more A denial of service vulnerability was reported in some ThinkPad models that could cause a system... CVE-2021-3718 4.3 MediumNovember 12, 2021
• lenovo ideapad s940-14iwl firmware, ideapad yoga s940-14iwl firmware, thinkpad bios +131 more +133 more A potential vulnerability in the SMI callback function used to access flash device in some... CVE-2021-3599 6.7 MediumNovember 12, 2021
• lenovo bios, 730s-13iml firmware, ideacentre aio 5-24imb05 firmware +19 more +21 more Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel... CVE-2021-3453 6.8 MediumJuly 16, 2021
• lenovo bios, thinkpad bios +1 more A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models... CVE-2021-3452 6.7 MediumJuly 16, 2021
• lenovo thinkpad stack wireless router firmware An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router... CVE-2020-8350 8.8 HighOctober 14, 2020
• lenovo thinkpad, thinkpad t490 \(20nx\) firmware, thinkpad t490 \(20qx\) firmware +8 more +10 more In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this... CVE-2020-8341 2.4 LowSeptember 1, 2020
• lenovo thinkpad a285 bios, thinkpad a485 bios, thinkpad t495 bios +9 more +11 more The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up... CVE-2020-8335 6.1 MediumSeptember 1, 2020
• hp elite slice firmware, elite x2 1012 g2 firmware, elite x2 1013 g3 firmware +130 more +132 more Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that... CVE-2019-18618 6.0 MediumJuly 22, 2020
• hp envy - 13t-ah100 firmware, envy - 13t-aq100 firmware, envy - 17t-bw000 firmware +109 more +111 more Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX... CVE-2019-18619 7.8 HighJuly 22, 2020
• lenovo bios, thinkpad e14 firmware, thinkpad e15 firmware +36 more +38 more Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent... CVE-2020-8336 6.4 MediumJune 9, 2020
• lenovo bios, thinkpad a275 firmware, thinkpad a285 firmware +5 more +7 more The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485,... CVE-2020-8334 6.1 MediumJune 9, 2020
• lenovo 14iwl firmware, 330-14ast firmware, 330-15ast firmware +170 more +172 more A potential vulnerability in the SMI callback function used in the Legacy SD driver in some... CVE-2020-8323 6.4 MediumJune 9, 2020
• lenovo bios, thinkpad 11e firmware, thinkpad 11e yoga gen 6 firmware +98 more +100 more An internal shell was included in BIOS image in some ThinkPad models that could allow escalation... CVE-2020-8320 6.4 MediumJune 9, 2020
• lenovo thinkpad usb-c dock firmware A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a... CVE-2019-6176 7.5 HighNovember 20, 2019
• lenovo thinkpad t460p, 130-14ikb firmware, 130-15ikb firmware +391 more +393 more ThinkPad T460p and T470p BIOS Tamper Mechanism CVE-2019-6188 9.8 CriticalNovember 12, 2019
• lenovo thinkpad, 130-14ikb firmware, 130-15ikb firmware +390 more +392 more A potential vulnerability in the SMI callback function in some Lenovo ThinkPad models may allow... CVE-2019-6172 6.4 MediumNovember 12, 2019
• lenovo thinkpad, 130-14ikb firmware, 130-15ikb firmware +390 more +392 more A potential vulnerability in some Lenovo ThinkPads may allow an attacker to execute arbitrary... CVE-2019-6170 6.4 MediumNovember 12, 2019
• lenovo 100e 2nd gen firmware, 300e 2nd gen firmware, 330-14ikbr firmware +105 more +107 more There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user... CVE-2019-10724 6.5 MediumAugust 28, 2019
• lenovo bios, 330-14igm firmware, 330-15igm firmware +175 more +177 more In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this... CVE-2019-6156 3.3 LowApril 10, 2019
• lenovo synaptics thinkpad ultranav driver, thiankpad l430 firmware, thiankpad l530 firmware +57 more +59 more In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of... CVE-2018-16098 7.8 HighJanuary 24, 2019
• Show olderLoading…