TX
Product
Thinkpad X270 Firmware
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Thinkpad X270 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18619 | 7.8 | Jul 22 | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary… Affected: before 5.2.3540.26 |
| CVE-2018-9062 | 6.8 | Jul 19 | In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code Affected: before r0iet53w |
| CVE-2022-4575 | 6.7 | Oct 30 | A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and… Affected: before 1.47 |
| CVE-2021-3599 | 6.7 | Nov 12 | A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to… Affected: before 2021-10-29 |
| CVE-2019-18618 | 6.0 | Jul 22 | Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local… Affected: before 5.2.3540.26 |
| CVE-2021-3786 | 5.5 | Nov 12 | A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM… Affected: before 2021-10-29 |
Showing 6