Skip to contentLenovo vulnerabilities
Products
Show 140 moreShow less
Newest
- lenovo bios, intel core i5-7200u firmware, core i5-7260u firmware +77 more +79 moreImproper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM)...CVE-2020-05297.8 High
- lenovo bios, intel core i5-7200u firmware, core i5-7260u firmware +77 more +79 moreImproper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core...CVE-2020-05287.8 High
- lenovo synaptics smart audio uwp app, synaptics smart audio uwp +1 moreAn unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics...CVE-2020-83376.7 Medium
- lenovo bios, thinkpad e14 firmware, thinkpad e15 firmware +36 more +38 moreLenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent...CVE-2020-83366.4 Medium
- lenovo bios, thinkpad a275 firmware, thinkpad a285 firmware +5 more +7 moreThe BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485,...CVE-2020-83346.1 Medium
- lenovo 14iwl firmware, 330-14ast firmware, 330-15ast firmware +170 more +172 moreA potential vulnerability in the SMI callback function used in the Legacy SD driver in some...CVE-2020-83236.4 Medium
- lenovo 14iwl firmware, 330-14ast firmware, 330-15ast firmware +49 more +51 moreA potential vulnerability in the SMI callback function used in the Legacy USB driver in some...CVE-2020-83226.4 Medium
- lenovo 130-14ast firmware, 130-14ikb firmware, 130-15ast firmware +170 more +172 moreA potential vulnerability in the SMI callback function used in the System Lock Preinstallation...CVE-2020-83216.4 Medium
- lenovo bios, thinkpad 11e firmware, thinkpad 11e yoga gen 6 firmware +98 more +100 moreAn internal shell was included in BIOS image in some ThinkPad models that could allow escalation...CVE-2020-83206.4 Medium
- lenovo installation packages, installation package +1 moreA symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3,...CVE-2019-61966.7 Medium
- lenovo installation packages, installation package +1 moreA DLL search path vulnerability could allow privilege escalation in some Lenovo installation...CVE-2019-61736.7 Medium
- lenovo printer lj4010dn, lj4010dn firmware, lj6700dn firmware +1 more +3 moreA denial of service vulnerability was reported in the firmware prior to version 1.01 used in...CVE-2020-83305.3 Medium
- lenovo printer lj4010dn, lj4010dn firmware, lj6700dn firmware +1 more +3 moreA denial of service vulnerability was reported in the firmware prior to version 1.01 used in...CVE-2020-83295.3 Medium
- lenovo vantageA privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System...CVE-2020-83277.3 High
- lenovo lenovoappscenariopluginsystem for lenovo system interface foundation, system interface foundation +1 moreA vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface...CVE-2020-83245.0 Medium
- lenovo system interface foundationA privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to...CVE-2020-83197.3 High
- lenovo lenovosystemupdateplugin for lenovo system interface foundation, system interface foundation +1 moreA privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo...CVE-2020-83187.3 High
- lenovo vantageA vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an...CVE-2020-83164.4 Medium
- lenovo solution centerMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A...CVE-2015-85368.8 High
- lenovo solution centerMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory...CVE-2015-85357.8 High
- lenovo solution centerMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local...CVE-2015-85347.8 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A...CVE-2015-73367.5 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race...CVE-2015-73357.0 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local...CVE-2015-73347.8 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local...CVE-2015-73337.8 High
- lenovo b50-10 firmware, edge 15 firmware, flex 2 pro-15 firmware +24 more +26 moreMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer...CVE-2015-56849.8 Critical
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS...CVE-2019-197567.9 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreAn authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V...CVE-2019-61954.8 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity...CVE-2019-61945.7 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA)...CVE-2019-61937.5 High
- lenovo bios, 510-15ikl firmware, 510s-08ikl firmware +180 more +182 moreLenovo was notified of a potential denial of service vulnerability, affecting various versions of...CVE-2019-61905.0 Medium
- lenovo ez media & backup center ix2, ez media & backup center ix2-dl, ez media \& backup center ix2-dl firmware +1 more +3 moreA vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1...CVE-2019-197586.1 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document...CVE-2019-197575.4 Medium
- lenovo browserThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...CVE-2019-133227.5 High
- lenovo browserThis vulnerability allows network adjacent attackers to execute arbitrary code on affected...CVE-2019-133215.5 Medium
- tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreInteger overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in...CVE-2014-48596.8 Medium
- tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreMultiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update...CVE-2014-48606.8 Medium
- lenovo power management driverA potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1...CVE-2019-6192Public exploit4.4 Medium
- lenovo energy management driver, energy management +1 moreA denial of service vulnerability has been reported in Lenovo Energy Management Driver for...CVE-2019-61837.5 High
- lenovo lenovopaper, paper +1 moreA potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow...CVE-2019-61917.8 High
- lenovo system interface foundationA potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1...CVE-2019-61897.8 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreA stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could...CVE-2019-61876.5 Medium
- lenovo system interface foundationA potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1...CVE-2019-61868.8 High
- lenovo customer engagement service (ccsdk), customer engagement service +1 moreA potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software...CVE-2019-61847.8 High
- lenovo thinkpad usb-c dock firmwareA potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a...CVE-2019-61767.5 High
- lenovo thinkpad t460p, 130-14ikb firmware, 130-15ikb firmware +391 more +393 moreThinkPad T460p and T470p BIOS Tamper MechanismCVE-2019-61889.8 Critical
- lenovo thinkpad, 130-14ikb firmware, 130-15ikb firmware +390 more +392 moreA potential vulnerability in the SMI callback function in some Lenovo ThinkPad models may allow...CVE-2019-61726.4 Medium
- lenovo thinkpad, 130-14ikb firmware, 130-15ikb firmware +390 more +392 moreA potential vulnerability in some Lenovo ThinkPads may allow an attacker to execute arbitrary...CVE-2019-61706.4 Medium
- dell system updateSystem Update VulnerabilityCVE-2019-61757.5 High
- lenovo thinkagile cp-sb, cp storage block firmware +1 moreAn internal product security audit discovered a session handling vulnerability in the web...CVE-2019-61617.5 High
- Show moreLoading…