Lenovo
lenovo
409 CVEs • 4,478 products
Products (4,478)
Click to collapseToggle
Products (4,478)
Click to collapse
CVEs (409)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. |
A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot. |
1Lenovo 68Nextscale N1200 Enclosure Firmware Thinkagile 2u4n FirmwareThinkagile Cp Cb 10 Firmware+65 moreJun 17, 2026 Apr 15, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
|
1Lenovo 1Thinksystem Sr670 V2 Firmware Jun 17, 2026 Feb 16, 2024 N/A· v4 2.3 LOW· v3 N/A· v2 ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server i...Show more |
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service. |
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges. |
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges. |
1Lenovo 4Tab M8 Hd Tb8505f Firmware Tab M8 Hd Tb8505fs FirmwareTab M8 Hd Tb8505x Firmware+1 moreJun 17, 2026 Jan 19, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device identifier. |
1Lenovo 6Tab M10 Plus Gen 3 Tb125fu Firmware Tab M8 Hd Tb8505f FirmwareTab M8 Hd Tb8505fs Firmware+3 moreJun 17, 2026 Jan 19, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands. |
A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information. |
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges. |
1Lenovo 61Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
|
1Lenovo 61Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
1Lenovo 61Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
1Lenovo 61Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
|
1Lenovo 61Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. |
1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. |
1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. |
1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 moreJun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. |