Lucene search

E53-80 Firmware Security Vulnerabilities

cve

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642,...

6.5CVSS

6.5AI Score

0.001EPSS

2019-08-29 12:15 AM

140

cve

CVE-2020-8322

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

6.7CVSS

7AI Score

0.0004EPSS

2020-06-09 08:15 PM

cve

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

6.7CVSS

7.1AI Score

0.0004EPSS

2020-06-09 08:15 PM