Lenovo: Security Vulnerabilities
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
CVSS Score
6.7
EPSS Score
0.003
Published
2023-01-23
A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the application.
CVSS Score
6.2
EPSS Score
0.002
Published
2023-01-23
An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service.
CVSS Score
5.5
EPSS Score
0.003
Published
2023-01-20
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
CVSS Score
6.7
EPSS Score
0.002
Published
2023-01-05
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
CVSS Score
6.7
EPSS Score
0.002
Published
2023-01-05
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.
CVSS Score
6.7
EPSS Score
0.002
Published
2023-01-05
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
CVSS Score
6.7
EPSS Score
0.002
Published
2023-01-05
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
CVSS Score
7.8
EPSS Score
0.002
Published
2022-12-26
ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice.
CVSS Score
4.7
EPSS Score
0.003
Published
2022-11-07
A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafted website.
CVSS Score
7.3
EPSS Score
0.006
Published
2022-08-23