Skip to content

Known vulnerabilities in Lenovo ThinkPad

Is your version affected?

CVE Summary Score Published
CVE-2023-5078 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated… 6.7 Medium Nov 8, 2023
CVE-2022-48189 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium Oct 30, 2023
CVE-2022-4574 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium Oct 30, 2023
CVE-2023-4030 A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause… 8.4 High Aug 17, 2023
CVE-2023-4029 A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may… 6.7 Medium Aug 17, 2023
CVE-2023-2290 A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and… 6.4 Medium Jun 26, 2023
CVE-2020-8341 In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash Not rated Sep 1, 2020
CVE-2019-6170 A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in… 6.4 Medium Nov 12, 2019
CVE-2019-6172 A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without… 6.4 Medium Nov 12, 2019

Other Lenovo products