8.4
High
CVE-2026-0940 A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local…
Description
A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinkPad T14 Gen 5 BIOS 1.17 | earliest → 1.17 | No fix stated |
| ThinkPad P14s Gen 5 BIOS 1.17 | earliest → 1.17 | No fix stated |
| ThinkPad Z13 Gen 2 BIOS 1.37 | earliest → 1.37 | No fix stated |
| ThinkPad Z16 Gen 2 BIOS 1.37 | earliest → 1.37 | No fix stated |
| ThinkPad P16v Gen 1 BIOS 1.62 | earliest → 1.62 | No fix stated |
| ThinkPad P15v Gen 3 BIOS 1.28 | earliest → 1.28 | No fix stated |
| ThinkPad Z13 Gen 1 BIOS 1.76 | earliest → 1.76 | No fix stated |
| ThinkPad Z16 Gen 1 BIOS 1.76 | earliest → 1.76 | No fix stated |