Skip to contentLenovo vulnerabilities
Products
Show 140 moreShow less
Newest
- lenovo ideapad duet 3-10igl5, ideapad duet 3 10igl5, ideapad duet 3 10igl5 firmware +2 moreA buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5...CVE-2023-50756.7 Medium
- lenovo view driverA potential use-after-free vulnerability was reported in the Lenovo View driver that could...CVE-2023-48915.5 Medium
- lenovo 1lenovo preload directory, preload directory +1 moreA privilege escalation vulnerability was reported in Lenovo preloaded devices deployed using...CVE-2023-47067.3 High
- lenovo system updateAn uncontrolled search path vulnerability was reported in Lenovo System Update that could allow...CVE-2023-46327.8 High
- lenovo thinkpad bios, thinkpad 25 firmware, thinkpad l560 firmware +11 more +13 moreA vulnerability due to improper write protection of UEFI variables was reported in the BIOS of...CVE-2022-45756.7 Medium
- lenovo thinkpad, thinkpad bios, thinkpad e14 firmware +84 more +86 moreAn SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an...CVE-2022-481896.7 Medium
- lenovo thinkpad, thinkpad bios, thinkpad l14 firmware +53 more +55 moreAn SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an...CVE-2022-45746.7 Medium
- lenovo thinkpad x1 fold gen 1, thinkpad x1 fold gen 1 firmware +1 moreAn SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an...CVE-2022-45736.7 Medium
- lenovo vantage hardwarescan plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3...CVE-2022-37026.1 Medium
- lenovo vantage systemupdate plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin...CVE-2022-37017.8 High
- lenovo vantage systemupdate plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage...CVE-2022-37006.1 Medium
- lenovo app store, app store app +1 moreAn information disclosure vulnerability has been identified in the Lenovo App Store which may...CVE-2022-36117.6 High
- lenovo g263dns firmware, gm265dn firmware, gm266dns firmware +4 more +6 moreA denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users...CVE-2022-34296.5 Medium
- lenovo g263dns firmware, gm265dn firmware, gm266dns firmware +4 more +6 moreStandard users can directly operate and set printer configuration information , such as IP, in...CVE-2022-348874.3 Medium
- lenovo g263dns firmware, gm265dn firmware, gm266dns firmware +4 more +6 moreA remote code execution vulnerability was found in the firmware used in some Lenovo printers,...CVE-2022-348868.8 High
- lenovo diagnostics, hardwarescanplugin, hardwarescan addin +1 more +3 moreA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to...CVE-2022-3699Public exploit7.8 High
- lenovo diagnostics, hardwarescanplugin, hardwarescan plugin +2 moreA denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior...CVE-2022-36984.4 Medium
- lenovo diagnostics, hardwarescanplugin, hardwarescan addin +1 more +3 moreA denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior...CVE-2022-03534.4 Medium
- ellipticlabs virtual lock sensor, lenovo elliptic labs virtual lock sensor, thinkpad t14 gen 3 +1 more +3 moreA vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that...CVE-2023-31127.8 High
- lenovo xclarity controller (xcc), thinkagile hx1331 firmware, thinkagile hx2330 firmware +56 more +58 moreAn authenticated XCC user with elevated privileges can perform blind SQL injection in limited...CVE-2023-46084.1 Medium
- lenovo xclarity controller (xcc), thinkagile hx1021 edg firmware, thinkagile hx1320 firmware +121 more +123 moreAn authenticated XCC user can change permissions for any user through a crafted API command.CVE-2023-46077.5 High
- lenovo xclarity controller (xcc), thinkagile hx1331 firmware, thinkagile hx2330 firmware +56 more +58 moreAn authenticated XCC user with Read-Only permission can change a different user’s password...CVE-2023-46068.1 High
- lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 moreA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS...CVE-2022-481836.1 Medium
- lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 moreA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS...CVE-2022-481826.1 Medium
- lenovo thinkpad t14s gen 3 bios, thinkpad x13 gen3 bios, thinkpad t14s gen 3 firmware +1 more +3 moreA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS...CVE-2022-37286.1 Medium
- lenovo notebook, bios, d330-10igl firmware +24 more +26 moreA potential vulnerability in a driver used during manufacturing process on some consumer Lenovo...CVE-2022-34316.7 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37466.7 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37454.4 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37446.7 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37434.4 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37426.7 Medium
- lenovo notebook, legion 5-15ach6 firmware, legion 5-15ach6a firmware +28 more +30 moreA buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products...CVE-2023-344196.7 Medium
- lenovo thinkpad, thinkpad p14s gen 2 firmware, thinkpad p15s gen 2 firmware +2 more +4 moreA vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen...CVE-2023-40308.4 High
- lenovo thinkpad, k14 type 21cu firmware, k14 type 21cv firmware +24 more +26 moreA buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad...CVE-2023-40296.7 Medium
- lenovo notebook, 13w yoga, 13w yoga firmware +58 more +60 moreA buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo...CVE-2023-40286.7 Medium
- lenovo universal device client (udc), universal device client +1 moreAn uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC...CVE-2023-30787.8 High
- lenovo xclarity administratorA valid, authenticated LXCA user with elevated privileges may be able to delete folders in the...CVE-2023-344226.5 Medium
- lenovo xclarity administratorA valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data...CVE-2023-344216.5 Medium
- lenovo xclarity administratorA valid, authenticated LXCA user with elevated privileges may be able to execute command...CVE-2023-344207.2 High
- lenovo xclarity administratorA valid, authenticated LXCA user may be able to gain unauthorized access to events and other data...CVE-2023-344188.1 High
- lenovo xclarity administratorAn unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common...CVE-2023-31138.2 High
- lenovo fan power controller (fpc), nextscale n1200 enclosure firmware, system management module (smm) +7 more +9 moreA valid, authenticated user with limited privileges may be able to use specifically crafted web...CVE-2023-29935.4 Medium
- lenovo fan power controller (fpc), nextscale n1200 enclosure firmware, system management module (smm) +8 more +10 moreAn unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC...CVE-2023-29927.5 High
- lenovo thinkpad, thinkpad e14, thinkpad e14 firmware +87 more +89 moreA potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker...CVE-2023-22906.4 Medium
- lenovo ideacentre 510s-07icb firmware, ideacentre 510s-07ick firmware, ideacentre 720-18apr firmware +25 more +27 moreA buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and...CVE-2022-481886.7 Medium
- lenovo ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware, ideacentre 3 07ach7 firmware +112 more +114 moreAn ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models...CVE-2022-481816.7 Medium
- lenovo thinkpad hybrid usb-c with usb-a dock firmware update tool, thinkpad hybrid usb-c with usb-a dock firmware +1 moreA local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware...CVE-2022-45697.8 High
- lenovo baiyingA certificate validation vulnerability exists in the Baiying Android application which could lead...CVE-2022-481866.2 Medium
- lenovo system updateA directory permissions management vulnerability in Lenovo System Update may allow elevation of...CVE-2022-45687.0 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read only access may gain elevated privileges through a...CVE-2023-06838.3 High
- Show moreLoading…