CVEs (12)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Lenovo 85Thinkpad E14 Firmware Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 moreJun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. |
1Lenovo 85Thinkpad E14 Firmware Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 moreJun 17, 2026 Jun 26, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code. |
1Lenovo 325Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 3 07iab7 Firmware+322 moreJun 17, 2026 Jan 30, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. |
1Lenovo 133Ideapad S940 14iwl Firmware Ideapad Yoga S940 14iwl FirmwareThinkpad 10 Firmware+130 moreJun 17, 2026 Nov 12, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range. |
1Lenovo 39Thinkpad 11e 3rd Gen Firmware Thinkpad 11e 4th Gen Celeron FirmwareThinkpad 11e 4th Gen I3 Firmware+36 moreJun 17, 2026 Nov 12, 2021 N/A· v4 4.6 MEDIUM· v3 4.7 MEDIUM· v2 A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS. |
1Lenovo 133Ideapad S940 14iwl Firmware Ideapad Yoga S940 14iwl FirmwareThinkpad 10 Firmware+130 moreJun 17, 2026 Nov 12, 2021 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. |
1Lenovo 38Thinkpad E14 Firmware Thinkpad E15 FirmwareThinkpad E490 Firmware+35 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. |
1Lenovo 17214iwl Firmware 330 14ast Firmware330 15ast Firmware+169 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. |
1Lenovo 100Thinkpad 11e Firmware Thinkpad 11e Yoga Gen 6 FirmwareThinkpad 13 2nd Gen Firmware+97 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. |
1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 moreJun 17, 2026 Nov 12, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access. |
1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 moreJun 17, 2026 Nov 12, 2019 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution. |
1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 moreJun 17, 2026 Nov 12, 2019 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution. |