CVEs (7)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Lenovo 70100e 2nd Gen Firmware 100w Gen 3 Firmware13w Yoga Firmware+67 moreJun 17, 2026 Jan 26, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. |
1Lenovo 21100e 2nd Gen Firmware 300e 2nd Gen FirmwareIdeapad 1 11ada05 Firmware+18 moreJun 17, 2026 Jul 16, 2021 N/A· v4 6.8 MEDIUM· v3 4.4 MEDIUM· v2 A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage. |
1Lenovo 17214iwl Firmware 330 14ast Firmware330 15ast Firmware+169 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. |
1Lenovo 5114iwl Firmware 330 14ast Firmware330 15ast Firmware+48 moreJun 17, 2026 Jun 9, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. |
1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 moreJun 17, 2026 Nov 12, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access. |
1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 moreJun 17, 2026 Nov 12, 2019 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution. |
1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 moreJun 17, 2026 Nov 12, 2019 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution. |