← Back

Lenovo

lenovo

406 CVEs • 4,477 products

Products (4,477)

Click to collapse
Toggle
Pcmanager
pcmanager
System Update
system_update

CVEs (406)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Lenovo
1Thinksystem Sr670 V2 Firmware
Jun 17, 2026
Feb 16, 2024
N/A· v4
2.3 LOW· v3
N/A· v2
ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server i...Show more
ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP 800-193-compliant Platform Firmware Resiliency (PFR) security subsystem significantly mitigates this issue.Show less
1Lenovo
1App Store
Jun 17, 2026
Jan 19, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service.
1Lenovo
1Vantage
Jun 17, 2026
Jan 19, 2024
N/A· v4
6.8 MEDIUM· v3
N/A· v2
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges.
1Lenovo
1Vantage
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.
1Lenovo
4Tab M8 Hd Tb8505f Firmware
Tab M8 Hd Tb8505fs FirmwareTab M8 Hd Tb8505x Firmware+1 more
Jun 17, 2026
Jan 19, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device identifier.
1Lenovo
6Tab M10 Plus Gen 3 Tb125fu Firmware
Tab M8 Hd Tb8505f FirmwareTab M8 Hd Tb8505fs Firmware+3 more
Jun 17, 2026
Jan 19, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands.
1Lenovo
2Browser Hd
Browser Mobile
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information.
1Lenovo
1Universal Device Client
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
1Lenovo
61Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
1Lenovo
61Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
1Lenovo
61Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
1Lenovo
61Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
1Lenovo
61Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14iob6 Firmware+58 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
1Lenovo
111Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more
Jun 17, 2026
Nov 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.