TB
Product
ThinkPad BIOS
10
CVEs
0
On KEV
6.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 10Low 0
Watch
Add ThinkPad BIOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5078 | 6.7 | Nov 8 | A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware Affected: various |
| CVE-2022-4575 | 6.7 | Oct 30 | A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and… Affected: various |
| CVE-2022-48189 | 6.7 | Oct 30 | An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code Affected: various |
| CVE-2022-4574 | 6.7 | Oct 30 | An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code Affected: various |
| CVE-2022-1108 | 6.7 | Apr 22 | A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local… Affected: various |
| CVE-2022-1107 | 6.7 | Apr 22 | During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be… Affected: various |
| CVE-2021-3843 | 6.7 | Nov 12 | A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code Affected: various |
| CVE-2021-3599 | 6.7 | Nov 12 | A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to… Affected: various |
| CVE-2021-3452 | 6.7 | Jul 16 | A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary… Affected: various |
| CVE-2021-3718 | 4.6 | Nov 12 | A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS Affected: various |
Showing 10