CVEs (5)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
3Hp LenovoSynaptics112Envy 13t Ah100 Firmware Envy 13t Aq100 FirmwareEnvy 17t Bw000 Firmware+109 moreJun 17, 2026 Jul 22, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise c...Show more |
3Hp LenovoSynaptics133Elite Slice Firmware Elite X2 1012 G2 FirmwareElite X2 1013 G3 Firmware+130 moreJun 17, 2026 Jul 22, 2020 N/A· v4 6.0 MEDIUM· v3 3.6 LOW· v2 Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the...Show more |
1Lenovo 17214iwl Firmware 330 14ast Firmware330 15ast Firmware+169 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. |
1Lenovo 100Thinkpad 11e Firmware Thinkpad 11e Yoga Gen 6 FirmwareThinkpad 13 2nd Gen Firmware+97 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. |
1Lenovo 108100e 2nd Gen Firmware 300e 2nd Gen Firmware330 14ikbr Firmware+105 moreJun 17, 2026 Aug 29, 2019 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions:...Show more |