CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434

CVE-2022-4434 affects Lenovo ThinkPad X13s by a buffer over-read in the ThinkPadX13s BIOS driver, enabling a local attacker with elevated privileges to disclose information. Public docs indicate BIOS/UEFI fixes exist (Lenovo LEN-103709) and updates to at least version 1.47 (N3HET75W) or newer; ot...

CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433

CVE-2022-4433 is a local, privilege-elevation vulnerability in the Lenovo ThinkPad X13s BIOS, specifically in the LenovoSetupConfigDxe driver. The issue is a buffer over-read that can disclose sensitive information to a local attacker with elevated privileges. Multiple sources confirm the affecte...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

CVE-2022-4432 describes a buffer over-read in the ThinkPad X13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to disclose information. Supported by multiple vendors/documents, the vulnerability affects the BIOS module PersistenceConfigDxe on Lenovo Th...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

PT-2023-14450 · Lenovo · Thinkpad X13S Bios

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver, potentially allowing a local attacker with elevated privileges to cause information...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad BIOS, which stems from its LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure via buffer...

PT-2023-14455 · Lenovo · Thinkpad X13S Bios

Name of the Vulnerable Software and Affected Versions: ThinkPad X13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the LenovoRemoteConfigUpdateDxe driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

PT-2023-14452 · Lenovo · Thinkpad X13S Bios Driver

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS driver affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws

Qualcomm on Tuesday released patches to address multiple security flaws in its chipsets, some of which could be exploited to cause information disclosure and memory corruption. The five vulnerabilities -- tracked from CVE-2022-40516 through CVE-2022-40520 -- also impact Lenovo ThinkPad X13s...

K91229003: Side-channel processor vulnerabilities CVE-2017-5715, CVE-2017-5753, and CVE-2017-5754

Security Advisory Description The following three side-channel attacks were publicly disclosed on January 3, 2018: CVE-2017-5715 Spectre-BTB previously known as Spectre Variant 2 Branch target injection Systems with microprocessors utilizing speculative execution and indirect branch prediction ma...

ThinkPad X13s BIOS Vulnerabilities - Lenovo Support US

No description provided...

K12055286: Intel CPU vulnerability CVE-2021-33060

Security Advisory Description Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2021-33060 Impact This vulnerability may allow an authenticated local user to potentially enable...

K000130240: Intel BIOS vulnerability CVE-2022-26006

Security Advisory Description Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2022-26006 Impact A local attacker logged in as a privileged user can exploit the vulnerability t...

PT-2023-13381 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this by using an SMI to send larger than expected input to a parameter t...

HP PC BIOS December 2022 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. HP has identifi...

CVE-2022-37018

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability...